From 46906dc17dccec5ca66f0aafcd4725ba2d67622e Mon Sep 17 00:00:00 2001 From: Alex Kotov Date: Sun, 12 Sep 2021 18:38:53 +0500 Subject: [PATCH] Support table "nat" --- defaults/main.yml | 2 ++ templates/rules.v4 | 18 ++++++++++++++++++ templates/rules.v6 | 18 ++++++++++++++++++ 3 files changed, 38 insertions(+) diff --git a/defaults/main.yml b/defaults/main.yml index 4077575..f2f9537 100644 --- a/defaults/main.yml +++ b/defaults/main.yml @@ -4,5 +4,7 @@ iptables__drop_by_default: false iptables__allow_output_ifaces: [] iptables__v4_filter_prepend: null iptables__v4_filter_append: null +iptables__v4_nat: null iptables__v6_filter_prepend: null iptables__v6_filter_append: null +iptables__v6_nat: null diff --git a/templates/rules.v4 b/templates/rules.v4 index 33186be..22666f3 100644 --- a/templates/rules.v4 +++ b/templates/rules.v4 @@ -1,3 +1,21 @@ +##### +*nat +##### + +:PREROUTING ACCEPT [0:0] +:INPUT ACCEPT [0:0] +:OUTPUT ACCEPT [0:0] +:POSTROUTING ACCEPT [0:0] + +# Remove all rules from all chains, +# delete all user-defined chains. +-F +-X + +{{ iptables__v4_nat }} + +COMMIT + ######## *filter ######## diff --git a/templates/rules.v6 b/templates/rules.v6 index bca10ad..1eab748 100644 --- a/templates/rules.v6 +++ b/templates/rules.v6 @@ -1,3 +1,21 @@ +##### +*nat +##### + +:PREROUTING ACCEPT [0:0] +:INPUT ACCEPT [0:0] +:OUTPUT ACCEPT [0:0] +:POSTROUTING ACCEPT [0:0] + +# Remove all rules from all chains, +# delete all user-defined chains. +-F +-X + +{{ iptables__v6_nat }} + +COMMIT + ######## *filter ########