From c4a6cf1534b864d3941c839d4a4dca7e505bd828 Mon Sep 17 00:00:00 2001
From: Quentin <quentin@deuxfleurs.fr>
Date: Sat, 12 Sep 2020 10:03:48 +0200
Subject: Rebase first step

---
 os_config/roles/network/files/rules.v6 | 12 ++++++++++++
 1 file changed, 12 insertions(+)
 create mode 100644 os_config/roles/network/files/rules.v6

(limited to 'os_config/roles/network/files/rules.v6')

diff --git a/os_config/roles/network/files/rules.v6 b/os_config/roles/network/files/rules.v6
new file mode 100644
index 0000000..17ff71c
--- /dev/null
+++ b/os_config/roles/network/files/rules.v6
@@ -0,0 +1,12 @@
+# WARNING!! When rules.{v4,v6} are changed, the whole iptables configuration is reloaded.
+# This creates issues with Docker, which injects its own configuration in iptables when it starts.
+# In practice, most (all?) containers will break if rules.{v4,v6} are changed,
+# and docker will have to be restared.
+
+
+*filter
+:INPUT DROP [0:0]
+:FORWARD DROP [0:0]
+:OUTPUT ACCEPT [0:0]
+COMMIT
+
-- 
cgit v1.2.3