Put logrotate,iptables,snapper and smartd to common

This commit is contained in:
Daniel A. Maierhofer
2018-07-13 14:20:25 +02:00
parent 44bfc1367f
commit cf86ac1833
12 changed files with 8 additions and 85 deletions

View File

@@ -0,0 +1,12 @@
# {{ ansible_managed }}
*filter
:INPUT DROP [0:0]
:FORWARD DROP [0:0]
:OUTPUT ACCEPT [0:0]
-A INPUT -p tcp --syn -j DROP
-A INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT
-A INPUT -p ipv6-icmp -j ACCEPT
-A INPUT -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT
-A INPUT -i lo -j ACCEPT
COMMIT