infrastructure/ansible/roles/network/files/rules.v6

# WARNING!! When rules.{v4,v6} are changed, the whole iptables configuration is reloaded.
# This creates issues with Docker, which injects its own configuration in iptables when it starts.
# In practice, most (all?) containers will break if rules.{v4,v6} are changed,
# and docker will have to be restared.


*filter
:INPUT DROP [0:0]
:FORWARD DROP [0:0]
:OUTPUT ACCEPT [0:0]
COMMIT
Make the net ansible section `never` run and add appropriate warnings 2020-05-21 12:00:47 +00:00			`# WARNING!! When rules.{v4,v6} are changed, the whole iptables configuration is reloaded.`
			`# This creates issues with Docker, which injects its own configuration in iptables when it starts.`
			`# In practice, most (all?) containers will break if rules.{v4,v6} are changed,`
			`# and docker will have to be restared.`


Initial commit 2019-06-01 14:02:49 +00:00			`*filter`
			`:INPUT DROP [0:0]`
			`:FORWARD DROP [0:0]`
			`:OUTPUT ACCEPT [0:0]`
			`COMMIT`