From 4c57fc0fa88db8df248e1a5448398742f1d6856b Mon Sep 17 00:00:00 2001 From: "Gin Tan (Monash University)" <ctan@m3-mgmt2.massive.org.au> Date: Thu, 4 Jul 2019 12:18:59 +1000 Subject: [PATCH] Adding a persistent rules Former-commit-id: 58df6508bf9ad9bd14b019f2016d17c3aebeb53e --- roles/nat_server/templates/iptables.j2 | 1 + 1 file changed, 1 insertion(+) diff --git a/roles/nat_server/templates/iptables.j2 b/roles/nat_server/templates/iptables.j2 index 07def7ca..c311a446 100644 --- a/roles/nat_server/templates/iptables.j2 +++ b/roles/nat_server/templates/iptables.j2 @@ -22,6 +22,7 @@ COMMIT :INPUT ACCEPT [0:0] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [0:0] +-A INPUT -s {{ PRIVATE_NETWORK_CIDR }} -j ACCEPT -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT -A INPUT -p icmp -j ACCEPT -A INPUT -i lo -j ACCEPT -- GitLab