e2dbda1bec
Our deployment tests don't need to send E-mail messages. More to the point, they may perform actions which would like to send E-mail messages. Make sure, at the network level, they'll be prevented from doing so. Also allow all connections to egress from the loopback interface, so that services like mailman can connect to the Exim MTA on localhost. Add new rolevars for egress rules to support this, and also fix up some missing related vars in the iptables role's documentation. Change-Id: If4acd2d3d543933ed1e00156cc83fe3a270612bd
11 lines
408 B
YAML
11 lines
408 B
YAML
iptables_allowed_hosts: []
|
|
iptables_egress_rules: []
|
|
iptables_egress_rules_v4: '{{ iptables_egress_rules }}'
|
|
iptables_egress_rules_v6: '{{ iptables_egress_rules }}'
|
|
iptables_public_ports: []
|
|
iptables_public_tcp_ports: '{{ iptables_public_ports }}'
|
|
iptables_public_udp_ports: '{{ iptables_public_ports }}'
|
|
iptables_rules: []
|
|
iptables_rules_v4: '{{ iptables_rules }}'
|
|
iptables_rules_v6: '{{ iptables_rules }}'
|