This can be tcp, udp, icmp, esp, ah, udplite, sctpor protocol: –This is to specify the packet or protocol to check.reject_with:-To specify the error when rejecting a package.rule_num: –To specify the number at which to Insert the rule.Acceptable values are port numbers as well as the service name.

source_port: –This is to specify the source or source port range.source: –This is to specify a source that can be an IP, hostname, network range, etc.src_range: –This is to specify the source IP range to match.This is to specify whether to add or remove a rule. state: –Acceptable values are absent and present.This is to specify the packet matching table on which command will work on. table: –Acceptable values are filter, nat, mangle, raw, and security.to_destination: –This specified the destination address to use.to_ports: – This is to specify the destination port range or a destination port.to_source: – This is to specify the source to be used.uid_owner: – This is to tell which user to use when doing a match in the owner rule.destination_port: –This is to specify the destination or destination port range.destination: –This is to specify the destination in a rule this can be an IP, hostname, network range, etc.comment: – Comment to add with the rule.

chain: –This is to tell which iptables chain will be modified.

The default is to decide whether to insert on top or append at the bottom.

action: –available options are appended and insert.

So, do remember these when using the Ansible Iptables module. Also, you shall be wary of the default values as you might not be mentioning all parameters in a play or task, but due to the default behavior of a parameter, it will anyway be realized and applied. You must use a combination of these to create a required rule. Like any other Ansible module, we have a set of parameters, their acceptance, and default values in this Ansible module.

Web development, programming languages, Software testing & others Explaining the Ansible IptablesĪnsible Iptables module is the same as you use Linux commands iptables and ip6tables because internally, it invokes those commands while executing any task on remote target machines.

Ansible iptables