From edfb2b8bca97b93aad973884d6c8e3ed43974be9 Mon Sep 17 00:00:00 2001 From: michael-conway Date: Tue, 23 Feb 2016 15:51:36 -0500 Subject: [PATCH] #1 remove elk from iptables --- ansible/roles/iptables/templates/iptables.j2 | 9 --------- 1 file changed, 9 deletions(-) diff --git a/ansible/roles/iptables/templates/iptables.j2 b/ansible/roles/iptables/templates/iptables.j2 index e54cbff55..29a303423 100644 --- a/ansible/roles/iptables/templates/iptables.j2 +++ b/ansible/roles/iptables/templates/iptables.j2 @@ -59,15 +59,6 @@ -A INPUT -m state --state NEW -m udp -p udp -s {{ net.dmz }} --dport {{ docker.registry.port }} -j ACCEPT {% endif %} -#{% if inventory_hostname in groups['elk'] %} -## logstash from DMZ -#-A INPUT -m state --state NEW -m tcp -p tcp -s {{ net.dmz }} --dport {{ elk.logstash.port }} -j ACCEPT -## kibana from DMZ -#-A INPUT -m state --state NEW -m tcp -p tcp -s {{ net.dmz }} --dport {{ elk.kibana.port }} -j ACCEPT -## elasticsearch from DMZ -#-A INPUT -m state --state NEW -m tcp -p tcp -s {{ net.dmz }} --dport {{ elk.elasticsearch.port }} -j ACCEPT -#{% endif %} - {% if inventory_hostname in groups['irods'] %} # irods from DMZ and Trust -A INPUT -m state --state NEW -m tcp -p tcp -s {{ net.dmz }} --dport 1247 -j ACCEPT