Skip to main content

Firewalld Role

This Ansible role can be used to set up firewalld.


Variables

VariablesTypeOptionsDefaults
firewalld_service_name:string---firewalld.service
firewalld_service_state:stringreloaded, restarted, started, stoppedstarted
firewalld_service_enabled:boolfalse, truetrue
firewalld_package_state:stringpresent, absent, latestpresent
firewalld_package:list---firewalld
firewalld_logging:stringoff, all, unicast, broadcast, multicastall
firewalld_permanent:boolfalse, truetrue
firewalld_immediate:boolfalse, truetrue
firewalld_default_zone:stringblock, dmz, drop, internal, public, trusted...block
firewalld_zones_define:dict------
firewalld_zones_define.zone:string------
firewalld_zones_define.source:string------
firewalld_zones_define.target:string%%REJECT%%, ACCEPT, DROP, default---
firewalld_rules_icmp:dict------
firewalld_rules_icmp.icmp_type:string------
firewalld_rules_icmp.zone:stringblock, dmz, drop, internal, public, trusted...---
firewalld_rules_icmp.state:stringenabled, disabled---
firewalld_rules_services:dict------
firewalld_rules_services.service:string------
firewalld_rules_services.zone:stringblock, dmz, drop, internal, public, trusted...---
firewalld_rules_services.state:stringenabled, disabled---
firewalld_rules_ports:dict------
firewalld_rules_ports.port:int------
firewalld_rules_ports.protocol:stringtcp, udp, icmp---
firewalld_rules_ports.zone:stringblock, dmz, drop, internal, public, trusted...---
firewalld_rules_ports.state:stringenabled, disabled---
firewalld_richrules_services:dict------
firewalld_richrules_services.service:string------
firewalld_richrules_services.allowip:string------
firewalld_richrules_services.zone:stringblock, dmz, drop, internal, public, trusted...---
firewalld_richrules_services.action:stringaccept, reject, drop, mark---
firewalld_richrules_ports:dict------
firewalld_richrules_ports.port:int------
firewalld_richrules_ports.allowip:string------
firewalld_richrules_ports.protocol:stringtcp, udp, icmp---
firewalld_richrules_ports.zone:stringblock, dmz, drop, internal, public, trusted...---
firewalld_richrules_ports.action:stringaccept, reject, drop, mark---

Example Playbook

- name: Import firewalld Role
hosts: all
roles:
- role: giftpilz0.general.firewalld