|
|
@ -23,22 +23,22 @@ DOCUMENTATION = '''
|
|
|
|
module: firewalld
|
|
|
|
module: firewalld
|
|
|
|
short_description: Manage arbitrary ports/services with firewalld
|
|
|
|
short_description: Manage arbitrary ports/services with firewalld
|
|
|
|
description:
|
|
|
|
description:
|
|
|
|
- This module allows for addition or deletion of services and ports either tcp or udp in either running or permanent firewalld rules
|
|
|
|
- This module allows for addition or deletion of services and ports either tcp or udp in either running or permanent firewalld rules.
|
|
|
|
version_added: "1.4"
|
|
|
|
version_added: "1.4"
|
|
|
|
options:
|
|
|
|
options:
|
|
|
|
service:
|
|
|
|
service:
|
|
|
|
description:
|
|
|
|
description:
|
|
|
|
- "Name of a service to add/remove to/from firewalld - service must be listed in /etc/services"
|
|
|
|
- "Name of a service to add/remove to/from firewalld - service must be listed in /etc/services."
|
|
|
|
required: false
|
|
|
|
required: false
|
|
|
|
default: null
|
|
|
|
default: null
|
|
|
|
port:
|
|
|
|
port:
|
|
|
|
description:
|
|
|
|
description:
|
|
|
|
- "Name of a port to add/remove to/from firewalld must be in the form PORT/PROTOCOL"
|
|
|
|
- "Name of a port or port range to add/remove to/from firewalld. Must be in the form PORT/PROTOCOL or PORT-PORT/PROTOCOL for port ranges."
|
|
|
|
required: false
|
|
|
|
required: false
|
|
|
|
default: null
|
|
|
|
default: null
|
|
|
|
rich_rule:
|
|
|
|
rich_rule:
|
|
|
|
description:
|
|
|
|
description:
|
|
|
|
- "Rich rule to add/remove to/from firewalld"
|
|
|
|
- "Rich rule to add/remove to/from firewalld."
|
|
|
|
required: false
|
|
|
|
required: false
|
|
|
|
default: null
|
|
|
|
default: null
|
|
|
|
zone:
|
|
|
|
zone:
|
|
|
@ -49,21 +49,21 @@ options:
|
|
|
|
choices: [ "work", "drop", "internal", "external", "trusted", "home", "dmz", "public", "block"]
|
|
|
|
choices: [ "work", "drop", "internal", "external", "trusted", "home", "dmz", "public", "block"]
|
|
|
|
permanent:
|
|
|
|
permanent:
|
|
|
|
description:
|
|
|
|
description:
|
|
|
|
- "Should this configuration be in the running firewalld configuration or persist across reboots"
|
|
|
|
- "Should this configuration be in the running firewalld configuration or persist across reboots."
|
|
|
|
required: true
|
|
|
|
required: true
|
|
|
|
default: true
|
|
|
|
default: true
|
|
|
|
state:
|
|
|
|
state:
|
|
|
|
description:
|
|
|
|
description:
|
|
|
|
- "Should this port accept(enabled) or reject(disabled) connections"
|
|
|
|
- "Should this port accept(enabled) or reject(disabled) connections."
|
|
|
|
required: true
|
|
|
|
required: true
|
|
|
|
default: enabled
|
|
|
|
default: enabled
|
|
|
|
timeout:
|
|
|
|
timeout:
|
|
|
|
description:
|
|
|
|
description:
|
|
|
|
- "The amount of time the rule should be in effect for when non-permanent"
|
|
|
|
- "The amount of time the rule should be in effect for when non-permanent."
|
|
|
|
required: false
|
|
|
|
required: false
|
|
|
|
default: 0
|
|
|
|
default: 0
|
|
|
|
notes:
|
|
|
|
notes:
|
|
|
|
- Not tested on any debian based system
|
|
|
|
- Not tested on any debian based system.
|
|
|
|
requirements: [ firewalld >= 0.2.11 ]
|
|
|
|
requirements: [ firewalld >= 0.2.11 ]
|
|
|
|
author: Adam Miller <maxamillion@fedoraproject.org>
|
|
|
|
author: Adam Miller <maxamillion@fedoraproject.org>
|
|
|
|
'''
|
|
|
|
'''
|
|
|
@ -71,6 +71,7 @@ author: Adam Miller <maxamillion@fedoraproject.org>
|
|
|
|
EXAMPLES = '''
|
|
|
|
EXAMPLES = '''
|
|
|
|
- firewalld: service=https permanent=true state=enabled
|
|
|
|
- firewalld: service=https permanent=true state=enabled
|
|
|
|
- firewalld: port=8081/tcp permanent=true state=disabled
|
|
|
|
- firewalld: port=8081/tcp permanent=true state=disabled
|
|
|
|
|
|
|
|
- firewalld: port=161-162/udp permanent=true state=enabled
|
|
|
|
- firewalld: zone=dmz service=http permanent=true state=enabled
|
|
|
|
- firewalld: zone=dmz service=http permanent=true state=enabled
|
|
|
|
- firewalld: rich_rule='rule service name="ftp" audit limit value="1/m" accept' permanent=true state=enabled
|
|
|
|
- firewalld: rich_rule='rule service name="ftp" audit limit value="1/m" accept' permanent=true state=enabled
|
|
|
|
'''
|
|
|
|
'''
|
|
|
|