---
# tasks file for apigee-opdk-iptables-port-block
#- name: Using iptables to block a port
#  become: true
#  shell: "iptables -A INPUT -p tcp --destination-port {{ destination_port }} ! -s `hostname` -i eth0 -j DROP"
#  environment:
#    http_proxy: "{{ http_proxy }}"
#    https_proxy: "{{ https_proxy }}"
#    no_proxy: "{{ no_proxy }}"
#    PORT_TIMEOUT: '{{ port_timeout | default(60) }}'
#    UP_TIMEOUT: '{{ up_timeout | default(60) }}'

- name: Using iptables to block a port
  become: true
  iptables:
    action: insert
    chain: INPUT
    protocol: "tcp"
    destination_port: "{{ destination_port }}"
    source: "!{{ private_address }}"
    in_interface: eth0
    policy: DROP
    state: present