ansible/oopen-server
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

update..

Browse Source
This commit is contained in:
Christoph
2023-06-16 20:43:34 +02:00
parent 9f97d27535
commit 12609c3eda
11 changed files with 260 additions and 30 deletions
Download Patch File Download Diff File Expand all files Collapse all files

50
roles/modify-ipt-gateway/tasks/main.yml
View File

@ -122,63 +122,63 @@
# ---
# MAC Address Filtering Gaming Devices
# IP Address Filtering Gaming Devices
# ---
- name: Check if String 'gaming_device_mac_addresses..' (IPv4) is present
shell: grep -q -E "^#?gaming_device_mac_addresses=" /etc/ipt-firewall/main_ipv4.conf
register: gaming_device_mac_addresses_ipv4_present
- name: Check if String 'gaming_device_ip_addresses..' (IPv4) is present
shell: grep -q -E "^#?gaming_device_ip_addresses=" /etc/ipt-firewall/main_ipv4.conf
register: gaming_device_ip_addresses_ipv4_present
when: main_ipv4_exists.stat.exists
failed_when: "gaming_device_mac_addresses_ipv4_present.rc > 1"
changed_when: "gaming_device_mac_addresses_ipv4_present.rc > 0"
failed_when: "gaming_device_ip_addresses_ipv4_present.rc > 1"
changed_when: "gaming_device_ip_addresses_ipv4_present.rc > 0"
- name: Adjust file '/etc/ipt-firewall/main_ipv4.conf' (gaming_device_mac_addresses)
- name: Adjust file '/etc/ipt-firewall/main_ipv4.conf' (gaming_device_ip_addresses)
blockinfile:
path: /etc/ipt-firewall/main_ipv4.conf
insertafter: '^#?\s*allow_remote_mac_src_addresses='
insertafter: '^#?\s*gaming_device_mac_addresses='
block: |
# =============
# - MAC Address Filtering Gaming Devices
# - IP Address Filtering Gaming Devices
# =============
# - MAC adresses here are only allowed connect to internet but NOT to loacl services and networks
# - IP adresses here are only allowed connect to internet but NOT to loacl services and networks
# -
# - Blank separated list
# -
gaming_device_mac_addresses=""
marker: "# Marker set by modify-ipt-gateway.yml (gaming_device_mac_addresses)"
gaming_device_ip_addresses=""
marker: "# Marker set by modify-ipt-gateway.yml (gaming_device_ip_addresses)"
when:
- main_ipv4_exists.stat.exists
- gaming_device_mac_addresses_ipv4_present is changed
- gaming_device_ip_addresses_ipv4_present is changed
- name: Check if String 'gaming_device_mac_addresses..' (IPv6) is present
shell: grep -q -E "^#?drop6_syn_flood=" /etc/ipt-firewall/main_ipv6.conf
register: gaming_device_mac_addresses_ipv6_present
- name: Check if String 'gaming_device_ip_addresses..' (IPv6) is present
shell: grep -q -E "^#?gaming_device_ip_addresses=" /etc/ipt-firewall/main_ipv6.conf
register: gaming_device_ip_addresses_ipv6_present
when: main_ipv6_exists.stat.exists
failed_when: "gaming_device_mac_addresses_ipv6_present.rc > 1"
changed_when: "gaming_device_mac_addresses_ipv6_present.rc > 0"
failed_when: "gaming_device_ip_addresses_ipv6_present.rc > 1"
changed_when: "gaming_device_ip_addresses_ipv6_present.rc > 0"
- name: Adjust file '/etc/ipt-firewall/main_ipv6.conf' (gaming_device_mac_addresses)
- name: Adjust file '/etc/ipt-firewall/main_ipv6.conf' (gaming_device_ip_addresses)
blockinfile:
path: /etc/ipt-firewall/main_ipv6.conf
insertafter: '^#?\s*allow_remote_mac_src_addresses='
insertafter: '^#?\s*gaming_device_mac_addresses='
block: |
# =============
# - MAC Address Filtering Gaming Devices
# - IP Address Filtering Gaming Devices
# =============
# - MAC adresses here are only allowed connect to internet but NOT to loacl services and networks
# - IP adresses here are only allowed connect to internet but NOT to loacl services and networks
# -
# - Blank separated list
# -
gaming_device_mac_addresses=""
marker: "# Marker set by modify-ipt-gateway.yml (gaming_device_mac_addresses)"
gaming_device_ip_addresses=""
marker: "# Marker set by modify-ipt-gateway.yml (gaming_device_ip_addresses)"
when:
- main_ipv6_exists.stat.exists
- gaming_device_mac_addresses_ipv6_present is changed
- gaming_device_ip_addresses_ipv6_present is changed
# ---