cmueller/ansible
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

Fix warnings for ufw examples (#63505)

Browse source
This commit is contained in:
houtd 2019-10-16 02:55:45 +11:00 committed by Sandra McCann
parent e0f67b58ce
commit e4eea0510c
1 changed files with 9 additions and 9 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

18
lib/ansible/modules/system/ufw.py
View file

@ -149,7 +149,7 @@ EXAMPLES = r'''
- name: Set logging - name: Set logging
ufw: ufw:
logging: on logging: 'on'
# Sometimes it is desirable to let the sender know when traffic is # Sometimes it is desirable to let the sender know when traffic is
# being denied, rather than simply ignoring it. In these cases, use # being denied, rather than simply ignoring it. In these cases, use
@ -185,7 +185,7 @@ EXAMPLES = r'''
- name: Deny all access to port 53 - name: Deny all access to port 53
ufw: ufw:
rule: deny rule: deny
port: 53 port: '53'
- name: Allow port range 60000-61000 - name: Allow port range 60000-61000
ufw: ufw:
@ -196,7 +196,7 @@ EXAMPLES = r'''
- name: Allow all access to tcp port 80 - name: Allow all access to tcp port 80
ufw: ufw:
rule: allow rule: allow
port: 80 port: '80'
proto: tcp proto: tcp
- name: Allow all access from RFC1918 networks to this host - name: Allow all access from RFC1918 networks to this host
@ -213,7 +213,7 @@ EXAMPLES = r'''
rule: deny rule: deny
proto: udp proto: udp
src: 1.2.3.4 src: 1.2.3.4
port: 514 port: '514'
comment: Block syslog comment: Block syslog
- name: Allow incoming access to eth0 from 1.2.3.5 port 5469 to 1.2.3.4 port 5469 - name: Allow incoming access to eth0 from 1.2.3.5 port 5469 to 1.2.3.4 port 5469
@ -223,9 +223,9 @@ EXAMPLES = r'''
direction: in direction: in
proto: udp proto: udp
src: 1.2.3.5 src: 1.2.3.5
from_port: 5469 from_port: '5469'
dest: 1.2.3.4 dest: 1.2.3.4
to_port: 5469 to_port: '5469'
# Note that IPv6 must be enabled in /etc/default/ufw for IPv6 firewalling to work. # Note that IPv6 must be enabled in /etc/default/ufw for IPv6 firewalling to work.
- name: Deny all traffic from the IPv6 2001:db8::/32 to tcp port 25 on this host - name: Deny all traffic from the IPv6 2001:db8::/32 to tcp port 25 on this host
@ -233,14 +233,14 @@ EXAMPLES = r'''
rule: deny rule: deny
proto: tcp proto: tcp
src: 2001:db8::/32 src: 2001:db8::/32
port: 25 port: '25'
- name: Deny all IPv6 traffic to tcp port 20 on this host - name: Deny all IPv6 traffic to tcp port 20 on this host
# this should be the first IPv6 rule # this should be the first IPv6 rule
ufw: ufw:
rule: deny rule: deny
proto: tcp proto: tcp
port: 20 port: '20'
to_ip: "::" to_ip: "::"
insert: 0 insert: 0
insert_relative_to: first-ipv6 insert_relative_to: first-ipv6
@ -254,7 +254,7 @@ EXAMPLES = r'''
ufw: ufw:
rule: deny rule: deny
proto: tcp proto: tcp
port: 20 port: '20'
to_ip: "::" to_ip: "::"
insert: -1 insert: -1
insert_relative_to: last-ipv4 insert_relative_to: last-ipv4