Re: [ansible-project] What is the best way to manage firewalls with Ansible?

2014-12-12 Thread David Reagan
@Michael I assume you are templating the /etc/sysconfig/iptables in CentOS, and /etc/iptables/rules.v4 in Ubuntu files? I just figured out that you can install the iptables-persistent package in Ubuntu, I hadn't been sure what files you were referring to before that... So, a reload on CentOS

Re: [ansible-project] What is the best way to manage firewalls with Ansible?

2014-12-12 Thread Michel Blanc
Hi David list, On 12/12/2014 20:13, David Reagan wrote: @Michael I assume you are templating the /etc/sysconfig/iptables in CentOS, and /etc/iptables/rules.v4 in Ubuntu files? I just figured out that you can install the iptables-persistent package in Ubuntu, I hadn't been sure what files you

Re: [ansible-project] What is the best way to manage firewalls with Ansible?

2014-12-11 Thread Michael DeHaan
CentOS has /etc/sysconfig/iptables if I knew iptables. Learning iptables config is not hard actually, nor is templating it. It can be used for very complex things ( http://www.ex-parrot.com/pete/upside-down-ternet.html) but simple accept/deny rules are straightforward You just write the

Re: [ansible-project] What is the best way to manage firewalls with Ansible?

2014-12-11 Thread Brian Coca
if you need a GUI, firewall builder http://www.fwbuilder.org/ is a desktop app that can generate iptables rules (among others), you can use it to get the commands for your templates. Though iptables is not hard the syntax can get clunky, the new linux fireall system, nftables, is much nicer and