diff --git a/defaults/main.yml b/defaults/main.yml index 4077575..f2f9537 100644 --- a/defaults/main.yml +++ b/defaults/main.yml @@ -4,5 +4,7 @@ iptables__drop_by_default: false iptables__allow_output_ifaces: [] iptables__v4_filter_prepend: null iptables__v4_filter_append: null +iptables__v4_nat: null iptables__v6_filter_prepend: null iptables__v6_filter_append: null +iptables__v6_nat: null diff --git a/templates/rules.v4 b/templates/rules.v4 index 33186be..22666f3 100644 --- a/templates/rules.v4 +++ b/templates/rules.v4 @@ -1,3 +1,21 @@ +##### +*nat +##### + +:PREROUTING ACCEPT [0:0] +:INPUT ACCEPT [0:0] +:OUTPUT ACCEPT [0:0] +:POSTROUTING ACCEPT [0:0] + +# Remove all rules from all chains, +# delete all user-defined chains. +-F +-X + +{{ iptables__v4_nat }} + +COMMIT + ######## *filter ######## diff --git a/templates/rules.v6 b/templates/rules.v6 index bca10ad..1eab748 100644 --- a/templates/rules.v6 +++ b/templates/rules.v6 @@ -1,3 +1,21 @@ +##### +*nat +##### + +:PREROUTING ACCEPT [0:0] +:INPUT ACCEPT [0:0] +:OUTPUT ACCEPT [0:0] +:POSTROUTING ACCEPT [0:0] + +# Remove all rules from all chains, +# delete all user-defined chains. +-F +-X + +{{ iptables__v6_nat }} + +COMMIT + ######## *filter ########