update ..
This commit is contained in:
@ -65,6 +65,24 @@
|
||||
notify:
|
||||
- Restart IPv6 Firewall
|
||||
|
||||
- name: addjust line 'brscan_port' (IPv4)
|
||||
lineinfile:
|
||||
path: /etc/ipt-firewall/main_ipv4.conf
|
||||
regexp: '^brscan_port='
|
||||
line: 'brscan_port="$standard_brother_brscan_port"'
|
||||
notify:
|
||||
- Restart IPv4 Firewall
|
||||
|
||||
- name: addjust line 'brscan_port' (IPv6)
|
||||
lineinfile:
|
||||
path: /etc/ipt-firewall/main_ipv6.conf
|
||||
regexp: '^brscan_port='
|
||||
line: 'brscan_port="$standard_brother_brscan_port"'
|
||||
when:
|
||||
- main_ipv6_exists.stat.exists
|
||||
notify:
|
||||
- Restart IPv6 Firewall
|
||||
|
||||
# ---
|
||||
# allow_jitsi_video_conference_out
|
||||
# ---
|
||||
@ -187,6 +205,201 @@
|
||||
- main_ipv6_exists.stat.exists
|
||||
- bigbluebutton_video_conference_out_ipv6_present is changed
|
||||
|
||||
|
||||
# ---
|
||||
# allow_alfaview_video_conference_out
|
||||
# ---
|
||||
|
||||
- name: Check if String 'allow_alfaview_video_conference_out..' (IPv4) is present
|
||||
shell: grep -q -E "^allow_alfaview_video_conference_out=" /etc/ipt-firewall/main_ipv4.conf
|
||||
register: alfaview_video_conference_out_ipv4_present
|
||||
when: main_ipv4_exists.stat.exists
|
||||
failed_when: "alfaview_video_conference_out_ipv4_present.rc > 1"
|
||||
changed_when: "alfaview_video_conference_out_ipv4_present.rc > 0"
|
||||
|
||||
- name: Adjust file '/etc/ipt-firewall/main_ipv4.conf' (bigbluebutton)
|
||||
lineinfile:
|
||||
dest: /etc/ipt-firewall/main_ipv4.conf
|
||||
state: present
|
||||
regexp: '^allow_alfaview_video_conference_out'
|
||||
line: 'allow_alfaview_video_conference_out=true'
|
||||
insertafter: '^#?\s*allow_mumble_request_out'
|
||||
when:
|
||||
- main_ipv4_exists.stat.exists
|
||||
- alfaview_video_conference_out_ipv4_present is changed
|
||||
|
||||
- name: Check if String 'allow_alfaview_video_conference_out..' (IPv6) is present
|
||||
shell: grep -q -E "^allow_alfaview_video_conference_out=" /etc/ipt-firewall/main_ipv6.conf
|
||||
register: alfaview_video_conference_out_ipv6_present
|
||||
when: main_ipv6_exists.stat.exists
|
||||
failed_when: "alfaview_video_conference_out_ipv6_present.rc > 1"
|
||||
changed_when: "alfaview_video_conference_out_ipv6_present.rc > 0"
|
||||
|
||||
- name: Adjust file '/etc/ipt-firewall/main_ipv6.conf' (bigbluebutton)
|
||||
lineinfile:
|
||||
dest: /etc/ipt-firewall/main_ipv6.conf
|
||||
state: present
|
||||
regexp: '^allow_alfaview_video_conference_out'
|
||||
line: 'allow_alfaview_video_conference_out=true'
|
||||
insertafter: '^#?\s*allow_mumble_request_out'
|
||||
when:
|
||||
- main_ipv6_exists.stat.exists
|
||||
- alfaview_video_conference_out_ipv6_present is changed
|
||||
|
||||
|
||||
# ---
|
||||
# Allow local services from ALL extern netwoks
|
||||
# ---
|
||||
|
||||
- name: Check if String 'allow_all_ext_traffic_to_local_service..' (IPv4) is present
|
||||
shell: grep -q -E "^allow_all_ext_traffic_to_local_service=" /etc/ipt-firewall/main_ipv4.conf
|
||||
register: allow_all_ext_traffic_to_local_service_ipv4_present
|
||||
when: main_ipv4_exists.stat.exists
|
||||
failed_when: "allow_all_ext_traffic_to_local_service_ipv4_present.rc > 1"
|
||||
changed_when: "allow_all_ext_traffic_to_local_service_ipv4_present.rc > 0"
|
||||
|
||||
- name: Adjust file '/etc/ipt-firewall/main_ipv4.conf' (allow_all_ext_traffic_to_local_service)
|
||||
blockinfile:
|
||||
path: /etc/ipt-firewall/main_ipv4.conf
|
||||
insertafter: '^#?\s*any_access_from_inet_networks'
|
||||
block: |
|
||||
|
||||
# =============
|
||||
# - Allow local services from ALL extern netwoks
|
||||
# =============
|
||||
|
||||
# - allow_all_ext_traffic_to_local_service
|
||||
# -
|
||||
# - allow_all_ext_traffic_to_local_service="local-address:port:protocol [local-address:port:protocol] .."
|
||||
# -
|
||||
# - Note:
|
||||
# - =====
|
||||
# - - Only 'tcp' and 'udp' are allowed valuse for protocol.
|
||||
# -
|
||||
# - Example:
|
||||
# - allow extern traffic to service at 83.223.73.210 on port 1036
|
||||
# - allow extern traffic to https service at 83.223.73.204
|
||||
# -
|
||||
# - allow_ext_net_to_local_service="
|
||||
# - 83.223.73.210:1036:tcp
|
||||
# - 83.223.73.204:$standard_https_port:tcp
|
||||
# - "
|
||||
# -
|
||||
# - Blank separated list
|
||||
# -
|
||||
allow_all_ext_traffic_to_local_service=""
|
||||
marker: "# Marker set by modify-ipt-gateway.yml (allow_all_ext_traffic_to_local_service)"
|
||||
when:
|
||||
- main_ipv4_exists.stat.exists
|
||||
- allow_all_ext_traffic_to_local_service_ipv4_present is changed
|
||||
|
||||
|
||||
- name: Check if String 'allow_all_ext_traffic_to_local_service..' (IPv6) is present
|
||||
shell: grep -q -E "^allow_all_ext_traffic_to_local_service=" /etc/ipt-firewall/main_ipv6.conf
|
||||
register: allow_all_ext_traffic_to_local_service_ipv6_present
|
||||
when: main_ipv6_exists.stat.exists
|
||||
failed_when: "allow_all_ext_traffic_to_local_service_ipv6_present.rc > 1"
|
||||
changed_when: "allow_all_ext_traffic_to_local_service_ipv6_present.rc > 0"
|
||||
|
||||
- name: Adjust file '/etc/ipt-firewall/main_ipv6.conf' (allow_all_ext_traffic_to_local_service)
|
||||
blockinfile:
|
||||
path: /etc/ipt-firewall/main_ipv6.conf
|
||||
insertafter: '^#?\s*any_access_from_inet_networks'
|
||||
block: |
|
||||
|
||||
|
||||
# =============
|
||||
# - Allow local services from ALL extern netwoks
|
||||
# =============
|
||||
|
||||
# - allow_all_ext_traffic_to_local_service
|
||||
# -
|
||||
# - allow_all_ext_traffic_to_local_service="local-address,port,protocol [local-address,port,protocol] .."
|
||||
# -
|
||||
# - Note:
|
||||
# - =====
|
||||
# - - Only 'tcp' and 'udp' are allowed valuse for protocol.
|
||||
# -
|
||||
# - Example:
|
||||
# - allow extern traffic to service at 2a01:30:1fff:fd00::210 on port 1036
|
||||
# - allow extern traffic to https service at 2a01:30:1fff:fd00::204
|
||||
# -
|
||||
# - allow_ext_net_to_local_service="
|
||||
# - 2a01:30:1fff:fd00::210,1036,tcp
|
||||
# - 2a01:30:1fff:fd00::204,$standard_https_port,tcp
|
||||
# - "
|
||||
# -
|
||||
# - Blank separated list
|
||||
# -
|
||||
allow_all_ext_traffic_to_local_service=""
|
||||
marker: "# Marker set by modify-ipt-gateway.yml (allow_all_ext_traffic_to_local_service)"
|
||||
when:
|
||||
- main_ipv6_exists.stat.exists
|
||||
- allow_all_ext_traffic_to_local_service_ipv6_present is changed
|
||||
|
||||
|
||||
|
||||
# ---
|
||||
# Epson Network Scanner
|
||||
# ---
|
||||
|
||||
- name: Check if String 'epson_scanner_ips..' (IPv4) is present
|
||||
shell: grep -q -E "^epson_scanner_ips=" /etc/ipt-firewall/main_ipv4.conf
|
||||
register: epson_scanner_ips_ipv4_present
|
||||
when: main_ipv4_exists.stat.exists
|
||||
failed_when: "epson_scanner_ips_ipv4_present.rc > 1"
|
||||
changed_when: "epson_scanner_ips_ipv4_present.rc > 0"
|
||||
|
||||
- name: Adjust file '/etc/ipt-firewall/main_ipv4.conf' (epson_scanner)
|
||||
blockinfile:
|
||||
path: /etc/ipt-firewall/main_ipv4.conf
|
||||
insertafter: '^#?\s*brscan_port'
|
||||
block: |
|
||||
# ======
|
||||
# - Epson Network Scan
|
||||
# ======
|
||||
|
||||
# - IP Adresses Epson Network Scanner
|
||||
# -
|
||||
# - Blank seoarated list
|
||||
# -
|
||||
epson_scanner_ips=""
|
||||
epson_scan_port="$standard_epson_network_scan_port"
|
||||
|
||||
marker: "# Marker set by modify-ipt-gateway.yml (epson_scanner)"
|
||||
when:
|
||||
- main_ipv4_exists.stat.exists
|
||||
- epson_scanner_ips_ipv4_present is changed
|
||||
|
||||
- name: Check if String 'epson_scanner_ips..' (IPv6) is present
|
||||
shell: grep -q -E "^epson_scanner_ips=" /etc/ipt-firewall/main_ipv6.conf
|
||||
register: epson_scanner_ips_ipv6_present
|
||||
when: main_ipv6_exists.stat.exists
|
||||
failed_when: "epson_scanner_ips_ipv6_present.rc > 1"
|
||||
changed_when: "epson_scanner_ips_ipv6_present.rc > 0"
|
||||
|
||||
- name: Adjust file '/etc/ipt-firewall/main_ipv6.conf' (epson_scanner)
|
||||
blockinfile:
|
||||
path: /etc/ipt-firewall/main_ipv6.conf
|
||||
insertafter: '^#?\s*brscan_port'
|
||||
block: |
|
||||
# ======
|
||||
# - Epson Network Scan
|
||||
# ======
|
||||
|
||||
# - IP Adresses Epson Network Scanner
|
||||
# -
|
||||
# - Blank seoarated list
|
||||
# -
|
||||
epson_scanner_ips=""
|
||||
epson_scan_port="$standard_epson_network_scan_port"
|
||||
|
||||
marker: "# Marker set by modify-ipt-gateway.yml (epson_scanner)"
|
||||
when:
|
||||
- main_ipv6_exists.stat.exists
|
||||
- epson_scanner_ips_ipv6_present is changed
|
||||
|
||||
|
||||
# ---
|
||||
# jitsi video conference service
|
||||
# ---
|
||||
@ -266,6 +479,63 @@
|
||||
- jitsi_service_ipv6_present is changed
|
||||
|
||||
|
||||
# ---
|
||||
# alfaview video conference service
|
||||
# ---
|
||||
|
||||
- name: Check if String 'alfaview_tcp_ports=..' (IPv4) is present
|
||||
shell: grep -q -E "^alfaview_tcp_ports=" /etc/ipt-firewall/main_ipv4.conf
|
||||
register: alfaview_service_ipv4_present
|
||||
when: main_ipv4_exists.stat.exists
|
||||
failed_when: "alfaview_service_ipv4_present.rc > 1"
|
||||
changed_when: "alfaview_service_ipv4_present.rc > 0"
|
||||
|
||||
- name: Adjust file '/etc/ipt-firewall/main_ipv4.conf' (alfaview service)
|
||||
blockinfile:
|
||||
path: /etc/ipt-firewall/main_ipv4.conf
|
||||
insertafter: '^#?\s*mumble_ports'
|
||||
block: |
|
||||
|
||||
# ======
|
||||
# - alfaview - Video Conferencing Systems
|
||||
# ======
|
||||
|
||||
# - alfaview Service Ports
|
||||
# -
|
||||
alfaview_tcp_ports="$standard_alfaview_service_tcp_ports"
|
||||
alfaview_udp_ports="$standard_alfaview_service_udp_ports"
|
||||
marker: "# Marker set by modify-ipt-gateway.yml (alfaview service)"
|
||||
when:
|
||||
- main_ipv4_exists.stat.exists
|
||||
- alfaview_service_ipv4_present is changed
|
||||
|
||||
- name: Check if String 'alfaview_tcp_ports=..' (IPv6) is present
|
||||
shell: grep -q -E "^alfaview_tcp_ports=" /etc/ipt-firewall/main_ipv6.conf
|
||||
register: alfaview_service_ipv6_present
|
||||
when: main_ipv6_exists.stat.exists
|
||||
failed_when: "alfaview_service_ipv6_present.rc > 1"
|
||||
changed_when: "alfaview_service_ipv6_present.rc > 0"
|
||||
|
||||
- name: Adjust file '/etc/ipt-firewall/main_ipv6.conf' (alfaview service)
|
||||
blockinfile:
|
||||
path: /etc/ipt-firewall/main_ipv6.conf
|
||||
insertafter: '^#?\s*mumble_ports'
|
||||
block: |
|
||||
|
||||
# ======
|
||||
# - alfaview - Video Conferencing Systems
|
||||
# ======
|
||||
|
||||
# - alfaview Service Ports
|
||||
# -
|
||||
alfaview_tcp_ports="$standard_alfaview_service_tcp_ports"
|
||||
alfaview_udp_ports="$standard_alfaview_service_udp_ports"
|
||||
marker: "# Marker set by modify-ipt-gateway.yml (alfaview service)"
|
||||
when:
|
||||
- main_ipv6_exists.stat.exists
|
||||
- alfaview_service_ipv6_present is changed
|
||||
|
||||
|
||||
# ---
|
||||
# TURN Server (Stun Server) (for Nextcloud 'talk' app)
|
||||
# ---
|
||||
|
||||
Reference in New Issue
Block a user