Improved firewall loop

tasks/main.yml

@@ -18,10 +18,12 @@
   tags:
         - setup
         - packages
-- name: Allow Unbound TCP through iptables
+- name: Allow Unbound through iptables
   loop:
-          - ipv4
+        - { ipv: 'ipv4', proto: 'tcp' }
-          - ipv6
+        - { ipv: 'ipv6', proto: 'tcp' }
+        - { ipv: 'ipv4', proto: 'udp' }
+        - { ipv: 'ipv6', proto: 'udp' }
   iptables:
         chain: INPUT
         ctstate:
@@ -30,27 +32,8 @@
                 - RELATED
         destination_port: "53"
         jump: ACCEPT
-          ip_version: '{{ item }}'
+        ip_version: '{{ item.ipv }}'
-          protocol: tcp
+        protocol: '{{ item.proto }}'
-  notify:
-          - Save netfilter rules
-  tags:
-        - update
-        - firewall
-- name: Allow Unbound UDP through iptables
-  loop:
-          - ipv4
-          - ipv6
-  iptables:
-          chain: INPUT
-          ctstate:
-                  - NEW
-                  - ESTABLISHED
-                  - RELATED
-          destination_port: "53"
-          jump: ACCEPT
-          ip_version: '{{ item }}'
-          protocol: udp
   notify:
         - Save netfilter rules
   tags: