cmueller/ansible
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

add iptables tcp-flags option (#20777)

Browse source 
* add iptables tcp-flags option

* fix invalid character in iptables documentation

* fix wrong default value for tcp_flags in the documentation
This commit is contained in:
mwellmeyer 2017-08-02 20:54:00 +02:00 committed by jctanner
parent a3404418c0
commit 54a3bcc4ec
1 changed files with 15 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

15
lib/ansible/modules/system/iptables.py
View file

@ -104,6 +104,15 @@ options:
inverts the sense of the address. inverts the sense of the address.
required: false required: false
default: null default: null
tcp_flags:
description:
- TCP flags specification. tcp_flags expects a dict with the two keys
"flags" and "flags_set". The "flags" list is the mask, a list of
flags you want to examine. The "flags_set" list tells which one(s)
should be set. If one of the two values is missing, the --tcp-flags option
will be ignored.
required: false
default: {}
match: match:
description: description:
- Specifies a match to use, that is, an extension module that tests for - Specifies a match to use, that is, an extension module that tests for
@ -357,6 +366,10 @@ def append_param(rule, param, flag, is_list):
if param is not None: if param is not None:
rule.extend([flag, param]) rule.extend([flag, param])
def append_tcp_flags(rule, param, flag):
if param:
if 'flags' in param and 'flags_set' in param:
rule.extend([flag, ','.join(param['flags']), ','.join(param['flags_set'])])
def append_csv(rule, param, flag): def append_csv(rule, param, flag):
if param: if param:
@ -379,6 +392,7 @@ def construct_rule(params):
append_param(rule, params['source'], '-s', False) append_param(rule, params['source'], '-s', False)
append_param(rule, params['destination'], '-d', False) append_param(rule, params['destination'], '-d', False)
append_param(rule, params['match'], '-m', True) append_param(rule, params['match'], '-m', True)
append_tcp_flags(rule, params['tcp_flags'], '--tcp-flags')
append_param(rule, params['jump'], '-j', False) append_param(rule, params['jump'], '-j', False)
append_param(rule, params['to_destination'], '--to-destination', False) append_param(rule, params['to_destination'], '--to-destination', False)
append_param(rule, params['to_source'], '--to-source', False) append_param(rule, params['to_source'], '--to-source', False)
@ -499,6 +513,7 @@ def main():
destination=dict(required=False, default=None, type='str'), destination=dict(required=False, default=None, type='str'),
to_destination=dict(required=False, default=None, type='str'), to_destination=dict(required=False, default=None, type='str'),
match=dict(required=False, default=[], type='list'), match=dict(required=False, default=[], type='list'),
tcp_flags=dict(required=False, default={}, type='dict'),
jump=dict(required=False, default=None, type='str'), jump=dict(required=False, default=None, type='str'),
goto=dict(required=False, default=None, type='str'), goto=dict(required=False, default=None, type='str'),
in_interface=dict(required=False, default=None, type='str'), in_interface=dict(required=False, default=None, type='str'),