fix firewalld rule

khaledk2 · Dec 9, 2024 · 0b90d4c · 0b90d4c
1 parent 13745f2
commit 0b90d4c
Showing 1 changed file with 4 additions and 4 deletions.
diff --git a/ansible/idr-firewall.yml b/ansible/idr-firewall.yml
@@ -27,8 +27,8 @@
         permanent: true
         rich_rule:
           - "rule family='ipv4' forward accept"
-          - "rule family='ipv4' source address='0.0.0.0/0' accept"
-          - "rule family='ipv4' destination address='0.0.0.0/0' accept"
+          - "rule family='ipv4' accept"
+          - "rule family='ipv4' direction='out' accept"
 
   # Docker sets up its own rules, don't overwrite
 # - hosts: >
@@ -98,8 +98,8 @@
         permanent: true
         rich_rule:
           - "rule family='ipv4' forward reject"
-          - "rule family='ipv4' source address='0.0.0.0/0' reject"
-          - "rule family='ipv4' destination address='0.0.0.0/0' accept"
+          - "rule family='ipv4' accept"
+          - "rule family='ipv4' direction='out' accept"
 
   vars:
     idr_external_tcp_ports: