Merge pull request #8 from hoonetorg/firewalld04
firewalld 0.4 settings
This commit is contained in:
commit
9d783b178a
@ -32,3 +32,21 @@ Lockdown={{ firewalld.lockdown|default('no') }}
|
|||||||
# The rp_filter for IPv4 is controlled using sysctl.
|
# The rp_filter for IPv4 is controlled using sysctl.
|
||||||
# Default: yes
|
# Default: yes
|
||||||
IPv6_rpfilter={{ firewalld.IPv6_rpfilter|default('yes') }}
|
IPv6_rpfilter={{ firewalld.IPv6_rpfilter|default('yes') }}
|
||||||
|
{%- if firewalld.get('IndividualCalls', False) %}
|
||||||
|
|
||||||
|
# IndividualCalls
|
||||||
|
# Do not use combined -restore calls, but individual calls. This increases the
|
||||||
|
# time that is needed to apply changes and to start the daemon, but is good for
|
||||||
|
# debugging.
|
||||||
|
# Default: no
|
||||||
|
IndividualCalls={{ firewalld.IndividualCalls|default('no') }}
|
||||||
|
{%- endif %}
|
||||||
|
{%- if firewalld.get('LogDenied', False) %}
|
||||||
|
|
||||||
|
# LogDenied
|
||||||
|
# Add logging rules right before reject and drop rules in the INPUT, FORWARD
|
||||||
|
# and OUTPUT chains for the default rules and also final reject and drop rules
|
||||||
|
# in zones. Possible values are: all, unicast, broadcast, multicast and off.
|
||||||
|
# Default: off
|
||||||
|
LogDenied={{ firewalld.LogDenied|default('off') }}
|
||||||
|
{%- endif %}
|
||||||
|
Loading…
Reference in New Issue
Block a user