diff options
author | Romain Brucker <romain.brucker@amalto.com> | 2015-11-03 11:41:30 -0600 |
---|---|---|
committer | Romain Brucker <romain.brucker@amalto.com> | 2015-11-03 11:41:30 -0600 |
commit | dbee2266e198f6d83837421b38612683b814166a (patch) | |
tree | cc29acfb78c7f971efc0f8dd7850b79c19b2cc58 /system/iptables.py | |
parent | 6a87eed58690ec8ccb0e6a37da3bdbb45f38e7ff (diff) | |
download | ansible-modules-extras-dbee2266e198f6d83837421b38612683b814166a.tar.gz |
Adding limit feature to iptables module
Diffstat (limited to 'system/iptables.py')
-rw-r--r-- | system/iptables.py | 12 |
1 files changed, 12 insertions, 0 deletions
diff --git a/system/iptables.py b/system/iptables.py index 8c2a67eb..83eb1b71 100644 --- a/system/iptables.py +++ b/system/iptables.py @@ -208,6 +208,10 @@ options: - "ctstate is a list of the connection states to match in the conntrack module. Possible states are: 'INVALID', 'NEW', 'ESTABLISHED', 'RELATED', 'UNTRACKED', 'SNAT', 'DNAT'" required: false + limit: + description: + - "Specifies the maximum average number of matches to allow per second. The number can specify units explicitly, using `/second', `/minute', `/hour' or `/day', or parts of them (so `5/second' is the same as `5/s')." + required: false ''' EXAMPLES = ''' @@ -244,6 +248,11 @@ def append_conntrack(rule, param): rule.extend(['-m']) rule.extend(['conntrack']) +def append_limit(rule, param): + if param: + rule.extend(['-m']) + rule.extend(['limit']) + def construct_rule(params): rule = [] @@ -265,6 +274,8 @@ def construct_rule(params): if params['ctstate']: append_conntrack(rule, params['ctstate']) append_param(rule, ','.join(params['ctstate']), '--ctstate', False) + append_limit(rule, params['limit']) + append_param(rule, params['limit'], '--limit', False) return rule @@ -315,6 +326,7 @@ def main(): to_ports=dict(required=False, default=None, type='str'), comment=dict(required=False, default=None, type='str'), ctstate=dict(required=False, default=[], type='list'), + limit=dict(required=False, default=[], type='list'), ), ) args = dict( |