ansible/community.general
1
0
Fork 0
mirror of https://github.com/ansible-collections/community.general.git synced 2024-09-14 20:13:21 +02:00
Code Releases Activity

Docs: iptables module cleanup (#46368)

Browse source 
Signed-off-by: Major Hayden <major@redhat.com>
This commit is contained in:
Major Hayden 2018-10-03 14:39:57 -05:00 committed by Sandra McCann
parent 6d9be66418
commit 208b3c53dd
1 changed files with 18 additions and 9 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

27
lib/ansible/modules/system/iptables.py
View file

@ -15,13 +15,13 @@ ANSIBLE_METADATA = {'metadata_version': '1.1',
DOCUMENTATION = ''' DOCUMENTATION = '''
--- ---
module: iptables module: iptables
short_description: Modify the systems iptables short_description: Modify iptables rules
version_added: "2.0" version_added: "2.0"
author: author:
- Linus Unnebäck (@LinusU) <linus@folkdatorn.se> - Linus Unnebäck (@LinusU) <linus@folkdatorn.se>
- Sébastien DA ROCHA (@sebastiendarocha) - Sébastien DA ROCHA (@sebastiendarocha)
description: description:
- Iptables is used to set up, maintain, and inspect the tables of IP packet - C(iptables) is used to set up, maintain, and inspect the tables of IP packet
filter rules in the Linux kernel. filter rules in the Linux kernel.
- This module does not handle the saving and/or loading of rules, but rather - This module does not handle the saving and/or loading of rules, but rather
only manipulates the current rules that are present in memory. This is the only manipulates the current rules that are present in memory. This is the
@ -64,10 +64,14 @@ options:
default: ipv4 default: ipv4
chain: chain:
description: description:
- Chain to operate on. - "Specify the iptables chain to modify. This could be a user-defined chain or one of the standard iptables chains:"
- "This option can either be the name of a user defined chain or any of - C(INPUT)
the builtin chains: 'INPUT', 'FORWARD', 'OUTPUT', 'PREROUTING', - C(FORWARD)
'POSTROUTING', 'SECMARK', 'CONNSECMARK'." - C(OUTPUT)
- C(PREROUTING)
- C(POSTROUTING)
- C(SECMARK)
- C(CONNSECMARK)
protocol: protocol:
description: description:
- The protocol of the rule or of the packet to check. - The protocol of the rule or of the packet to check.
@ -227,9 +231,14 @@ options:
ctstate: ctstate:
description: description:
- "C(ctstate) is a list of the connection states to match in the conntrack - "C(ctstate) is a list of the connection states to match in the conntrack
module. module. Possible states are:"
Possible states are: 'INVALID', 'NEW', 'ESTABLISHED', 'RELATED', - C(INVALID)
'UNTRACKED', 'SNAT', 'DNAT'" - C(NEW)
- C(ESTABLISHED)
- C(RELATED)
- C(UNTRACKED)
- C(SNAT)
- C(DNAT)
choices: [ DNAT, ESTABLISHED, INVALID, NEW, RELATED, SNAT, UNTRACKED ] choices: [ DNAT, ESTABLISHED, INVALID, NEW, RELATED, SNAT, UNTRACKED ]
default: [] default: []
limit: limit: