Majic Projects
Majic Ansible Roles
Go to the previous open issue
Go to the previous issue (open or closed)
star_faded.png
Please log in to bookmark issues
icon_project.png Majic Ansible Roles / Closed Feature request MAR-85 Support IPv6 in firewall rules
action_vote_minus_faded.png
0
Votes
action_vote_plus_faded.png
Go to the next issue (open or closed)
Go to the next open issue
There are no more issues in that direction.
This issue has been closed with status "Closed" and resolution "RESOLVED".
Issue basics
  • Type of issue
    Feature request
  • Category
    Not determined
  • Targetted for
    1.3.0
  • Status
    Closed
  • Progress
  • Priority
    Not determined
User pain
  • Type of bug
    Not triaged
  • Likelihood
    Not triaged
  • Effect
    Not triaged
Affected by this issue (0)
There are no items
People involved
Times and dates
  • Posted at
  • Last updated
  • Estimated time
    2 hours
  • Time spent
    4 hours
    Click here to see time logged against this issue
Issue details
  • Resolution
    RESOLVED
Attachments (0)
There is nothing attached to this issue
Duplicate issues (0)
This issue does not have any duplicates
Description

Currently the firewall rules cover IPv4 only. If destination sever uses IPv6 it would effectively leave it without any firewall on the IPv6 address.

Therefore it would be good to support IPv6 in all roles.

The following should be implemented:

  • Make sure all firewall rules deployed via ferm are applied to both IPv4 and IPv6. This will require that all roles which deploy firewall rules cover both IPv4 and IPv6 rules. In some cases the rules can be unified under the same domain directive, while in others they will need to be duplicated.
  • Update documentation and usage instructions.
  • Update role reference documentation for mail_forwarder to emphasize that IPv6 address must be available at least for the SMTP relay entry (since ferm will resolve it during loading time, and error out if it fails).
Todos (0 / 0)
There are no comments