gregandev/rpi-ansible
1
0
Fork 0
mirror of https://github.com/ruanbekker/rpi-ansible.git synced 2026-09-05 05:50:41 +02:00
Code Issues Projects Releases Wiki Activity

don't log igmp; drop multicast silently

Browse Source
This commit is contained in:
Glenn K. Lockwood
2019-07-20 18:25:06 -07:00
parent 6d7c298731
commit b7f53d8555
2 changed files with 30 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
roles/common/tasks/main.yml
+26 -1
View File
@@ -92,18 +92,43 @@
port: ssh
proto: tcp
log: yes
tags:
- ufw
- name: allow mDNS through UFW
ufw:
rule: allow
to_ip: 224.0.0.251
proto: igmp
log: no
tags:
- ufw
- name: drop multicast without logging
ufw:
rule: deny
to_ip: 224.0.0.1
log: no
tags:
- ufw
- name: set default incoming UFW policy to deny
ufw:
direction: incoming
policy: deny
tags:
- ufw
- name: set default outgoing UFW policy to deny
- name: set default outgoing UFW policy to allow
ufw:
direction: outgoing
policy: allow
tags:
- ufw
- name: enable UFW
ufw:
state: enabled
logging: yes
tags:
- ufw