fork https://github.com/mattsta/mailwebHEADmaster

1 files changed, 13 insertions, 0 deletions

diff --git a/ansible/roles/disableFirewall/files/modprobe.d/blacklist-iptables.conf b/ansible/roles/disableFirewall/files/modprobe.d/blacklist-iptables.conf
new file mode 100644
index 0000000..4655374
--- /dev/null
+++ b/ansible/roles/disableFirewall/files/modprobe.d/blacklist-iptables.conf
@@ -0,0 +1,13 @@
+# Don't load iptables on startup (or ever)!
+
+# These look weird, but the 'blacklist' command still allows
+# module insertion.
+#
+# This method defines a load-time alias so when you load the module,
+# it runs a delegated command to load the module instead, but in
+# the case of denying modules completely, just run nothing.
+install ip6table_filter /bin/true
+install iptable_filter /bin/true
+install ip6_tables /bin/true
+install ip_tables /bin/true
+install x_tables /bin/true