Add support for 'Microsoft Teams' on gateway firewalls.
This commit is contained in:
parent
83993a28d4
commit
a0208e6e78
@ -91,6 +91,47 @@
|
|||||||
- main_ipv6_exists.stat.exists
|
- main_ipv6_exists.stat.exists
|
||||||
|
|
||||||
|
|
||||||
|
# ---
|
||||||
|
# allow_ms_skype_teams_out
|
||||||
|
# ---
|
||||||
|
|
||||||
|
- name: Check if String 'allow_ms_skype_teams_out..' (IPv4) is present
|
||||||
|
shell: grep -q -E "^allow_ms_skype_teams_out=" /ro/etc/ipt-firewall/main_ipv4.conf
|
||||||
|
register: ms_skype_teams_out_ipv4_present
|
||||||
|
when: main_ipv4_exists.stat.exists
|
||||||
|
failed_when: "ms_skype_teams_out_ipv4_present.rc > 1"
|
||||||
|
changed_when: "ms_skype_teams_out_ipv4_present.rc > 0"
|
||||||
|
|
||||||
|
- name: Adjust file '/ro/etc/ipt-firewall/main_ipv4.conf' (ms teams)
|
||||||
|
lineinfile:
|
||||||
|
dest: /ro/etc/ipt-firewall/main_ipv4.conf
|
||||||
|
state: present
|
||||||
|
regexp: '^allow_ms_skype_teams_out'
|
||||||
|
line: 'allow_ms_skype_teams_out=true'
|
||||||
|
insertafter: '^#?\s*allow_bigbluebutton_video_conference_out'
|
||||||
|
when:
|
||||||
|
- main_ipv4_exists.stat.exists
|
||||||
|
- ms_skype_teams_out_ipv4_present is changed
|
||||||
|
|
||||||
|
- name: Check if String 'allow_ms_skype_teams_out..' (IPv6) is present
|
||||||
|
shell: grep -q -E "^allow_ms_skype_teams_out=" /ro/etc/ipt-firewall/main_ipv6.conf
|
||||||
|
register: ms_skype_teams_out_ipv6_present
|
||||||
|
when: main_ipv6_exists.stat.exists
|
||||||
|
failed_when: "ms_skype_teams_out_ipv6_present.rc > 1"
|
||||||
|
changed_when: "ms_skype_teams_out_ipv6_present.rc > 0"
|
||||||
|
|
||||||
|
- name: Adjust file '/ro/etc/ipt-firewall/main_ipv6.conf' (ms teams)
|
||||||
|
lineinfile:
|
||||||
|
dest: /ro/etc/ipt-firewall/main_ipv6.conf
|
||||||
|
state: present
|
||||||
|
regexp: '^allow_ms_skype_teams_out'
|
||||||
|
line: 'allow_ms_skype_teams_out=true'
|
||||||
|
insertafter: '^#?\s*allow_bigbluebutton_video_conference_out'
|
||||||
|
when:
|
||||||
|
- main_ipv6_exists.stat.exists
|
||||||
|
- ms_skype_teams_out_ipv6_present is changed
|
||||||
|
|
||||||
|
|
||||||
# ---
|
# ---
|
||||||
# allow_jitsi_video_conference_out
|
# allow_jitsi_video_conference_out
|
||||||
# ---
|
# ---
|
||||||
@ -142,7 +183,7 @@
|
|||||||
failed_when: "nc_talk_out_ipv4_present.rc > 1"
|
failed_when: "nc_talk_out_ipv4_present.rc > 1"
|
||||||
changed_when: "nc_talk_out_ipv4_present.rc > 0"
|
changed_when: "nc_talk_out_ipv4_present.rc > 0"
|
||||||
|
|
||||||
- name: Adjust file '/ro/etc/ipt-firewall/main_ipv4.conf' (jitsi)
|
- name: Adjust file '/ro/etc/ipt-firewall/main_ipv4.conf' (nc_talk)
|
||||||
lineinfile:
|
lineinfile:
|
||||||
dest: /ro/etc/ipt-firewall/main_ipv4.conf
|
dest: /ro/etc/ipt-firewall/main_ipv4.conf
|
||||||
state: present
|
state: present
|
||||||
@ -160,7 +201,7 @@
|
|||||||
failed_when: "nc_talk_out_ipv6_present.rc > 1"
|
failed_when: "nc_talk_out_ipv6_present.rc > 1"
|
||||||
changed_when: "nc_talk_out_ipv6_present.rc > 0"
|
changed_when: "nc_talk_out_ipv6_present.rc > 0"
|
||||||
|
|
||||||
- name: Adjust file '/ro/etc/ipt-firewall/main_ipv6.conf' (jitsi)
|
- name: Adjust file '/ro/etc/ipt-firewall/main_ipv6.conf' (nc_talk)
|
||||||
lineinfile:
|
lineinfile:
|
||||||
dest: /ro/etc/ipt-firewall/main_ipv6.conf
|
dest: /ro/etc/ipt-firewall/main_ipv6.conf
|
||||||
state: present
|
state: present
|
||||||
@ -714,6 +755,100 @@
|
|||||||
- epson_scanner_ips_ipv6_present is changed
|
- epson_scanner_ips_ipv6_present is changed
|
||||||
|
|
||||||
|
|
||||||
|
# ---
|
||||||
|
# Skype for Business Online und Microsoft Teams
|
||||||
|
# ---
|
||||||
|
|
||||||
|
- name: Check if String 'ms_skype_teams_tcp_ports=..' (IPv4) is present
|
||||||
|
shell: grep -q -E "^ms_skype_teams_tcp_ports=" /ro/etc/ipt-firewall/main_ipv4.conf
|
||||||
|
register: ms_skype_teams_ipv4_present
|
||||||
|
when: main_ipv4_exists.stat.exists
|
||||||
|
failed_when: "ms_skype_teams_ipv4_present.rc > 1"
|
||||||
|
changed_when: "ms_skype_teams_ipv4_present.rc > 0"
|
||||||
|
|
||||||
|
- name: Adjust file '/ro/etc/ipt-firewall/main_ipv4.conf' (ms teams service)
|
||||||
|
blockinfile:
|
||||||
|
path: /ro/etc/ipt-firewall/main_ipv4.conf
|
||||||
|
insertafter: '^#?\s*bigbluebutton_udp_ports'
|
||||||
|
block: |
|
||||||
|
|
||||||
|
# ======
|
||||||
|
# - Skype for Business Online und Microsoft Teams
|
||||||
|
# ======
|
||||||
|
|
||||||
|
# - Skype for Business Online und Microsoft Teams
|
||||||
|
# -
|
||||||
|
# - TCP 80,443
|
||||||
|
# -
|
||||||
|
# - UDP 3478,3479,3480,3481 --> 13.107.64.0/18, 52.112.0.0/14, 52.120.0.0/14
|
||||||
|
# -
|
||||||
|
# - Example:
|
||||||
|
# -
|
||||||
|
# - standard_ms_skype_teams_tcp_ports="80,443"
|
||||||
|
# - standard_ms_skype_teams_udp4_ports="3478,3479,3480,3481"
|
||||||
|
# - standard_ms_skype_teams_udp4_hosts="
|
||||||
|
# - 13.107.64.0/18
|
||||||
|
# - 52.112.0.0/14
|
||||||
|
# - 52.120.0.0/14
|
||||||
|
# - "
|
||||||
|
# -
|
||||||
|
# - Set to default values:
|
||||||
|
# - ms_skype_teams_tcp_ports="$standard_ms_skype_teams_tcp_ports"
|
||||||
|
# - ms_skype_teams_udp4_ports="$standard_ms_skype_teams_udp4_ports"
|
||||||
|
# - ms_skype_teams_udp4_hosts="$standard_ms_skype_teams_udp4_hosts"
|
||||||
|
# -
|
||||||
|
ms_skype_teams_tcp_ports="$standard_ms_skype_teams_tcp_ports"
|
||||||
|
ms_skype_teams_udp4_ports="$standard_ms_skype_teams_udp4_ports"
|
||||||
|
ms_skype_teams_udp4_hosts="$standard_ms_skype_teams_udp4_hosts"
|
||||||
|
marker: "# Marker set by modify-ipt-gateway.yml (ms teams service)"
|
||||||
|
when:
|
||||||
|
- main_ipv4_exists.stat.exists
|
||||||
|
- ms_skype_teams_ipv4_present is changed
|
||||||
|
|
||||||
|
- name: Check if String 'ms_skype_teams_tcp_ports=..' (IPv6) is present
|
||||||
|
shell: grep -q -E "^ms_skype_teams_tcp_ports=" /ro/etc/ipt-firewall/main_ipv6.conf
|
||||||
|
register: ms_skype_teams_ipv6_present
|
||||||
|
when: main_ipv6_exists.stat.exists
|
||||||
|
failed_when: "ms_skype_teams_ipv6_present.rc > 1"
|
||||||
|
changed_when: "ms_skype_teams_ipv6_present.rc > 0"
|
||||||
|
|
||||||
|
- name: Adjust file '/ro/etc/ipt-firewall/main_ipv6.conf' (ms teams service)
|
||||||
|
blockinfile:
|
||||||
|
path: /ro/etc/ipt-firewall/main_ipv6.conf
|
||||||
|
insertafter: '^#?\s*bigbluebutton_udp_ports'
|
||||||
|
block: |
|
||||||
|
|
||||||
|
# ======
|
||||||
|
# - Skype for Business Online und Microsoft Teams
|
||||||
|
# ======
|
||||||
|
|
||||||
|
# - Skype for Business Online und Microsoft Teams
|
||||||
|
# -
|
||||||
|
# - TCP 80,443
|
||||||
|
# -
|
||||||
|
# - Example:
|
||||||
|
# -
|
||||||
|
# - standard_ms_skype_teams_tcp_ports="80,443"
|
||||||
|
# - standard_ms_skype_teams_udp6_ports="3478,3479,3480,3481"
|
||||||
|
# - standard_ms_skype_teams_udp6_hosts="
|
||||||
|
# - 2a01:30:0:13:5054:ff:fe9f:422f/64
|
||||||
|
# - 2a01:4f8:231:19a7::2/52
|
||||||
|
# - "
|
||||||
|
# -
|
||||||
|
# - Set to default values:
|
||||||
|
# - ms_skype_teams_tcp_ports="$standard_ms_skype_teams_tcp_ports"
|
||||||
|
# - ms_skype_teams_udp6_ports="$standard_ms_skype_teams_udp6_ports"
|
||||||
|
# - ms_skype_teams_udp6_hosts="$standard_ms_skype_teams_udp6_hosts"
|
||||||
|
# -
|
||||||
|
ms_skype_teams_tcp_ports="$standard_ms_skype_teams_tcp_ports"
|
||||||
|
ms_skype_teams_udp6_ports="$standard_ms_skype_teams_udp6_ports"
|
||||||
|
ms_skype_teams_udp6_hosts="$standard_ms_skype_teams_udp6_hosts"
|
||||||
|
marker: "# Marker set by modify-ipt-gateway.yml (ms teams service)"
|
||||||
|
when:
|
||||||
|
- main_ipv6_exists.stat.exists
|
||||||
|
- ms_skype_teams_ipv6_present is changed
|
||||||
|
|
||||||
|
|
||||||
# ---
|
# ---
|
||||||
# jitsi video conference service
|
# jitsi video conference service
|
||||||
# ---
|
# ---
|
||||||
|
|||||||
@ -108,6 +108,48 @@
|
|||||||
notify:
|
notify:
|
||||||
- Restart IPv6 Firewall
|
- Restart IPv6 Firewall
|
||||||
|
|
||||||
|
# ---
|
||||||
|
# allow_ms_skype_teams_out
|
||||||
|
# ---
|
||||||
|
|
||||||
|
- name: Check if String 'allow_ms_skype_teams_out..' (IPv4) is present
|
||||||
|
shell: grep -q -E "^allow_ms_skype_teams_out=" /etc/ipt-firewall/main_ipv4.conf
|
||||||
|
register: ms_skype_teams_out_ipv4_present
|
||||||
|
when: main_ipv4_exists.stat.exists
|
||||||
|
failed_when: "ms_skype_teams_out_ipv4_present.rc > 1"
|
||||||
|
changed_when: "ms_skype_teams_out_ipv4_present.rc > 0"
|
||||||
|
|
||||||
|
- name: Adjust file '/etc/ipt-firewall/main_ipv4.conf' (ms teams)
|
||||||
|
lineinfile:
|
||||||
|
dest: /etc/ipt-firewall/main_ipv4.conf
|
||||||
|
state: present
|
||||||
|
regexp: '^allow_ms_skype_teams_out'
|
||||||
|
line: 'allow_ms_skype_teams_out=true'
|
||||||
|
insertafter: '^#?\s*allow_bigbluebutton_video_conference_out'
|
||||||
|
when:
|
||||||
|
- main_ipv4_exists.stat.exists
|
||||||
|
- ms_skype_teams_out_ipv4_present is changed
|
||||||
|
|
||||||
|
- name: Check if String 'allow_ms_skype_teams_out..' (IPv6) is present
|
||||||
|
shell: grep -q -E "^allow_ms_skype_teams_out=" /etc/ipt-firewall/main_ipv6.conf
|
||||||
|
register: ms_skype_teams_out_ipv6_present
|
||||||
|
when: main_ipv6_exists.stat.exists
|
||||||
|
failed_when: "ms_skype_teams_out_ipv6_present.rc > 1"
|
||||||
|
changed_when: "ms_skype_teams_out_ipv6_present.rc > 0"
|
||||||
|
|
||||||
|
- name: Adjust file '/etc/ipt-firewall/main_ipv6.conf' (ms teams)
|
||||||
|
lineinfile:
|
||||||
|
dest: /etc/ipt-firewall/main_ipv6.conf
|
||||||
|
state: present
|
||||||
|
regexp: '^allow_ms_skype_teams_out'
|
||||||
|
line: 'allow_ms_skype_teams_out=true'
|
||||||
|
insertafter: '^#?\s*allow_bigbluebutton_video_conference_out'
|
||||||
|
when:
|
||||||
|
- main_ipv6_exists.stat.exists
|
||||||
|
- ms_skype_teams_out_ipv6_present is changed
|
||||||
|
notify:
|
||||||
|
- Restart IPv6 Firewall
|
||||||
|
|
||||||
# ---
|
# ---
|
||||||
# allow_jitsi_video_conference_out
|
# allow_jitsi_video_conference_out
|
||||||
# ---
|
# ---
|
||||||
@ -161,7 +203,7 @@
|
|||||||
failed_when: "nc_talk_out_ipv4_present.rc > 1"
|
failed_when: "nc_talk_out_ipv4_present.rc > 1"
|
||||||
changed_when: "nc_talk_out_ipv4_present.rc > 0"
|
changed_when: "nc_talk_out_ipv4_present.rc > 0"
|
||||||
|
|
||||||
- name: Adjust file '/etc/ipt-firewall/main_ipv4.conf' (jitsi)
|
- name: Adjust file '/etc/ipt-firewall/main_ipv4.conf' (nc_talk)
|
||||||
lineinfile:
|
lineinfile:
|
||||||
dest: /etc/ipt-firewall/main_ipv4.conf
|
dest: /etc/ipt-firewall/main_ipv4.conf
|
||||||
state: present
|
state: present
|
||||||
@ -179,7 +221,7 @@
|
|||||||
failed_when: "nc_talk_out_ipv6_present.rc > 1"
|
failed_when: "nc_talk_out_ipv6_present.rc > 1"
|
||||||
changed_when: "nc_talk_out_ipv6_present.rc > 0"
|
changed_when: "nc_talk_out_ipv6_present.rc > 0"
|
||||||
|
|
||||||
- name: Adjust file '/etc/ipt-firewall/main_ipv6.conf' (jitsi)
|
- name: Adjust file '/etc/ipt-firewall/main_ipv6.conf' (nc_talk)
|
||||||
lineinfile:
|
lineinfile:
|
||||||
dest: /etc/ipt-firewall/main_ipv6.conf
|
dest: /etc/ipt-firewall/main_ipv6.conf
|
||||||
state: present
|
state: present
|
||||||
@ -773,6 +815,100 @@
|
|||||||
- epson_scanner_ips_ipv6_present is changed
|
- epson_scanner_ips_ipv6_present is changed
|
||||||
|
|
||||||
|
|
||||||
|
# ---
|
||||||
|
# Skype for Business Online und Microsoft Teams
|
||||||
|
# ---
|
||||||
|
|
||||||
|
- name: Check if String 'ms_skype_teams_tcp_ports=..' (IPv4) is present
|
||||||
|
shell: grep -q -E "^ms_skype_teams_tcp_ports=" /etc/ipt-firewall/main_ipv4.conf
|
||||||
|
register: ms_skype_teams_ipv4_present
|
||||||
|
when: main_ipv4_exists.stat.exists
|
||||||
|
failed_when: "ms_skype_teams_ipv4_present.rc > 1"
|
||||||
|
changed_when: "ms_skype_teams_ipv4_present.rc > 0"
|
||||||
|
|
||||||
|
- name: Adjust file '/etc/ipt-firewall/main_ipv4.conf' (ms teams service)
|
||||||
|
blockinfile:
|
||||||
|
path: /etc/ipt-firewall/main_ipv4.conf
|
||||||
|
insertafter: '^#?\s*bigbluebutton_udp_ports'
|
||||||
|
block: |
|
||||||
|
|
||||||
|
# ======
|
||||||
|
# - Skype for Business Online und Microsoft Teams
|
||||||
|
# ======
|
||||||
|
|
||||||
|
# - Skype for Business Online und Microsoft Teams
|
||||||
|
# -
|
||||||
|
# - TCP 80,443
|
||||||
|
# -
|
||||||
|
# - UDP 3478,3479,3480,3481 --> 13.107.64.0/18, 52.112.0.0/14, 52.120.0.0/14
|
||||||
|
# -
|
||||||
|
# - Example:
|
||||||
|
# -
|
||||||
|
# - standard_ms_skype_teams_tcp_ports="80,443"
|
||||||
|
# - standard_ms_skype_teams_udp4_ports="3478,3479,3480,3481"
|
||||||
|
# - standard_ms_skype_teams_udp4_hosts="
|
||||||
|
# - 13.107.64.0/18
|
||||||
|
# - 52.112.0.0/14
|
||||||
|
# - 52.120.0.0/14
|
||||||
|
# - "
|
||||||
|
# -
|
||||||
|
# - Set to default values:
|
||||||
|
# - ms_skype_teams_tcp_ports="$standard_ms_skype_teams_tcp_ports"
|
||||||
|
# - ms_skype_teams_udp4_ports="$standard_ms_skype_teams_udp4_ports"
|
||||||
|
# - ms_skype_teams_udp4_hosts="$standard_ms_skype_teams_udp4_hosts"
|
||||||
|
# -
|
||||||
|
ms_skype_teams_tcp_ports="$standard_ms_skype_teams_tcp_ports"
|
||||||
|
ms_skype_teams_udp4_ports="$standard_ms_skype_teams_udp4_ports"
|
||||||
|
ms_skype_teams_udp4_hosts="$standard_ms_skype_teams_udp4_hosts"
|
||||||
|
marker: "# Marker set by modify-ipt-gateway.yml (ms teams service)"
|
||||||
|
when:
|
||||||
|
- main_ipv4_exists.stat.exists
|
||||||
|
- ms_skype_teams_ipv4_present is changed
|
||||||
|
|
||||||
|
- name: Check if String 'ms_skype_teams_tcp_ports=..' (IPv6) is present
|
||||||
|
shell: grep -q -E "^ms_skype_teams_tcp_ports=" /etc/ipt-firewall/main_ipv6.conf
|
||||||
|
register: ms_skype_teams_ipv6_present
|
||||||
|
when: main_ipv6_exists.stat.exists
|
||||||
|
failed_when: "ms_skype_teams_ipv6_present.rc > 1"
|
||||||
|
changed_when: "ms_skype_teams_ipv6_present.rc > 0"
|
||||||
|
|
||||||
|
- name: Adjust file '/etc/ipt-firewall/main_ipv6.conf' (ms teams service)
|
||||||
|
blockinfile:
|
||||||
|
path: /etc/ipt-firewall/main_ipv6.conf
|
||||||
|
insertafter: '^#?\s*bigbluebutton_udp_ports'
|
||||||
|
block: |
|
||||||
|
|
||||||
|
# ======
|
||||||
|
# - Skype for Business Online und Microsoft Teams
|
||||||
|
# ======
|
||||||
|
|
||||||
|
# - Skype for Business Online und Microsoft Teams
|
||||||
|
# -
|
||||||
|
# - TCP 80,443
|
||||||
|
# -
|
||||||
|
# - Example:
|
||||||
|
# -
|
||||||
|
# - standard_ms_skype_teams_tcp_ports="80,443"
|
||||||
|
# - standard_ms_skype_teams_udp6_ports="3478,3479,3480,3481"
|
||||||
|
# - standard_ms_skype_teams_udp6_hosts="
|
||||||
|
# - 2a01:30:0:13:5054:ff:fe9f:422f/64
|
||||||
|
# - 2a01:4f8:231:19a7::2/52
|
||||||
|
# - "
|
||||||
|
# -
|
||||||
|
# - Set to default values:
|
||||||
|
# - ms_skype_teams_tcp_ports="$standard_ms_skype_teams_tcp_ports"
|
||||||
|
# - ms_skype_teams_udp6_ports="$standard_ms_skype_teams_udp6_ports"
|
||||||
|
# - ms_skype_teams_udp6_hosts="$standard_ms_skype_teams_udp6_hosts"
|
||||||
|
# -
|
||||||
|
ms_skype_teams_tcp_ports="$standard_ms_skype_teams_tcp_ports"
|
||||||
|
ms_skype_teams_udp6_ports="$standard_ms_skype_teams_udp6_ports"
|
||||||
|
ms_skype_teams_udp6_hosts="$standard_ms_skype_teams_udp6_hosts"
|
||||||
|
marker: "# Marker set by modify-ipt-gateway.yml (ms teams service)"
|
||||||
|
when:
|
||||||
|
- main_ipv6_exists.stat.exists
|
||||||
|
- ms_skype_teams_ipv6_present is changed
|
||||||
|
|
||||||
|
|
||||||
# ---
|
# ---
|
||||||
# jitsi video conference service
|
# jitsi video conference service
|
||||||
# ---
|
# ---
|
||||||
|
|||||||
Loading…
Reference in New Issue
Block a user