Docs: iptables module cleanup (#46368)

Signed-off-by: Major Hayden <major@redhat.com>
pull/36455/merge
Major Hayden 6 years ago committed by Sandra McCann
parent 6d9be66418
commit 208b3c53dd

@ -15,13 +15,13 @@ ANSIBLE_METADATA = {'metadata_version': '1.1',
DOCUMENTATION = ''' DOCUMENTATION = '''
--- ---
module: iptables module: iptables
short_description: Modify the systems iptables short_description: Modify iptables rules
version_added: "2.0" version_added: "2.0"
author: author:
- Linus Unnebäck (@LinusU) <linus@folkdatorn.se> - Linus Unnebäck (@LinusU) <linus@folkdatorn.se>
- Sébastien DA ROCHA (@sebastiendarocha) - Sébastien DA ROCHA (@sebastiendarocha)
description: description:
- Iptables is used to set up, maintain, and inspect the tables of IP packet - C(iptables) is used to set up, maintain, and inspect the tables of IP packet
filter rules in the Linux kernel. filter rules in the Linux kernel.
- This module does not handle the saving and/or loading of rules, but rather - This module does not handle the saving and/or loading of rules, but rather
only manipulates the current rules that are present in memory. This is the only manipulates the current rules that are present in memory. This is the
@ -64,10 +64,14 @@ options:
default: ipv4 default: ipv4
chain: chain:
description: description:
- Chain to operate on. - "Specify the iptables chain to modify. This could be a user-defined chain or one of the standard iptables chains:"
- "This option can either be the name of a user defined chain or any of - C(INPUT)
the builtin chains: 'INPUT', 'FORWARD', 'OUTPUT', 'PREROUTING', - C(FORWARD)
'POSTROUTING', 'SECMARK', 'CONNSECMARK'." - C(OUTPUT)
- C(PREROUTING)
- C(POSTROUTING)
- C(SECMARK)
- C(CONNSECMARK)
protocol: protocol:
description: description:
- The protocol of the rule or of the packet to check. - The protocol of the rule or of the packet to check.
@ -227,9 +231,14 @@ options:
ctstate: ctstate:
description: description:
- "C(ctstate) is a list of the connection states to match in the conntrack - "C(ctstate) is a list of the connection states to match in the conntrack
module. module. Possible states are:"
Possible states are: 'INVALID', 'NEW', 'ESTABLISHED', 'RELATED', - C(INVALID)
'UNTRACKED', 'SNAT', 'DNAT'" - C(NEW)
- C(ESTABLISHED)
- C(RELATED)
- C(UNTRACKED)
- C(SNAT)
- C(DNAT)
choices: [ DNAT, ESTABLISHED, INVALID, NEW, RELATED, SNAT, UNTRACKED ] choices: [ DNAT, ESTABLISHED, INVALID, NEW, RELATED, SNAT, UNTRACKED ]
default: [] default: []
limit: limit:

Loading…
Cancel
Save