opendev/system-config
Code Issues Proposed changes
2c72c8b9e3
system-config/playbooks/roles/iptables
History
Jeremy Stanley e2dbda1bec Block outbound SMTP connections from test jobs 
Our deployment tests don't need to send E-mail messages. More to the
point, they may perform actions which would like to send E-mail
messages. Make sure, at the network level, they'll be prevented from
doing so. Also allow all connections to egress from the loopback
interface, so that services like mailman can connect to the Exim MTA
on localhost.

Add new rolevars for egress rules to support this, and also fix up
some missing related vars in the iptables role's documentation.

Change-Id: If4acd2d3d543933ed1e00156cc83fe3a270612bd
2021-12-09 18:46:38 +00:00
..
defaults Block outbound SMTP connections from test jobs 2021-12-09 18:46:38 +00:00
handlers Run iptables in service playbooks instead of base 2020-06-04 07:44:22 -05:00
tasks Run iptables in service playbooks instead of base 2020-06-04 07:44:22 -05:00
templates Block outbound SMTP connections from test jobs 2021-12-09 18:46:38 +00:00
vars Run iptables in service playbooks instead of base 2020-06-04 07:44:22 -05:00
README.rst Block outbound SMTP connections from test jobs 2021-12-09 18:46:38 +00:00

README.rst

Install and configure iptables

Role Variables