drybjed
commented
9 years ago Good idea, probably adding item.interface option to dport_accept and other INPUT rules should be sufficient to make this possible. I plan to move them in the near future to the new directory-based config structure, then I'll probably add that option in the templates (and update the old ones as well). If you want, you can post PR for adding this in the current ones.
StephanErb
As user of ansible-ferm, I'd like to have an easy way to setup destination-specific firewall rules.
Consider the following example:
10.0.1.1\24): used as the management interfaces, SSHd binds here10.0.2.1\24): used for running services such as HTTP, ...I would like to setup rules that are specifc to a given destination IP. For example, eth0 should only accept SSH traffic but nothing else.