diff options
| author | Christian Pointner <equinox@spreadspace.org> | 2021-04-08 11:32:28 +0200 |
|---|---|---|
| committer | Christian Pointner <equinox@spreadspace.org> | 2021-04-08 11:32:28 +0200 |
| commit | 86e7a7ddc8d0c382e85b5f9b2f469fa48be54b1e (patch) | |
| tree | 204a4ef75c0f5b24696041d35aec745259df218a /inventory | |
| parent | ch-equinox-(ws|t450s) install texlive extra packages (diff) | |
fix configr for glt-r3 gateway
Diffstat (limited to 'inventory')
| -rw-r--r-- | inventory/group_vars/glt-live/network.yml | 13 | ||||
| -rw-r--r-- | inventory/host_vars/glt-gw-r3.yml | 1 |
2 files changed, 5 insertions, 9 deletions
diff --git a/inventory/group_vars/glt-live/network.yml b/inventory/group_vars/glt-live/network.yml index 1a1a42ca..c90442e5 100644 --- a/inventory/group_vars/glt-live/network.yml +++ b/inventory/group_vars/glt-live/network.yml @@ -6,8 +6,7 @@ network_zones: prefix: 192.168.127.0/24 gateway: 192.168.127.254 dns: - #- 192.168.127.254 - - 9.9.9.9 + - 192.168.127.254 dhcp: start: 1 limit: 149 @@ -51,14 +50,10 @@ network_zones: r3_ff: description: "realraum Funkfeuer Subnet, Internetuplink via Funkfeuer and mur.at" vlan: 255 - # prefix: 10.12.240.240/28 - # gateway: 10.12.240.247 - # dns: - # - 10.12.0.10 - prefix: 192.168.28.0/24 - gateway: 192.168.28.254 + prefix: 10.12.240.240/28 + gateway: 10.12.240.247 dns: - - 9.9.9.9 + - 10.12.0.10 offsets: glt-gw-r3: 8 diff --git a/inventory/host_vars/glt-gw-r3.yml b/inventory/host_vars/glt-gw-r3.yml index 4bcc27f8..95cef9d8 100644 --- a/inventory/host_vars/glt-gw-r3.yml +++ b/inventory/host_vars/glt-gw-r3.yml @@ -67,6 +67,7 @@ openwrt_mixin: iptables -A INPUT -i "$LAN_IF" -p tcp --dport 53 -d "$LAN_IP" -s "$LAN_IP/$LAN_MASK" -j ACCEPT iptables -A INPUT -i "$LAN_IF" -p icmp -d "$LAN_IP" -s "$LAN_IP/$LAN_MASK" -j ACCEPT + iptables -A INPUT -i "$LAN_IF" -p tcp --dport {{ ansible_port }} -d "$LAN_IP" -s "$LAN_IP/$LAN_MASK" -j ACCEPT iptables -A INPUT -i "$LAN_IF" -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT iptables -A FORWARD -i "$LAN_IF" -o "$WAN_IF" -s "$LAN_IP/$LAN_MASK" -j ACCEPT |