ANSIBLE.FIREWALLD(3)

NAME
firewalld - Manage arbitrary ports/services with firewalld

DESCRIPTION

This module allows for addition or deletion of services and ports either tcp or udp in either running or permanent firewalld rules

OPTIONS

permanent
    Should this configuration be in the running firewalld configuration or persist across reboots(required) (default: yes

port
    Name of a port to add/remove to/from firewalld must be in the form PORT/PROTOCOL

rich_rule
    Rich rule to add/remove to/from firewalld

service
    Name of a service to add/remove to/from firewalld - service must be listed in /etc/services

state
    Should this port accept(enabled) or reject(disabled) connections(required) (default: enabled)

timeout
    The amount of time the rule should be in effect for when non-permanent

zone
    The firewalld zone to add/remove to/from (NOTE: default zone can be configured per system but "public" is default from upstream. Available choices can be extended based on per-system configs, listed here are "out of the box" defaults). Choices: work,drop,internal,external,trusted,home,dmz,public,block. (default: system-default(public)).

NOTES

Not tested on any debian based system

EXAMPLES
- firewalld: service=https permanent=true state=enabled
- firewalld: port=8081/tcp permanent=true state=disabled
- firewalld: zone=dmz service=http permanent=true state=enabled
- firewalld: rich_rule='rule service name="ftp" audit limit value="1/m" accept' permanent=true state=enabled

AUTHOR
Adam Miller <maxamillion@fedoraproject.org>

SEE ALSO
ansible(1), http://ansible.github.com/modules.html#firewalld