18 lines
466 B
YAML
18 lines
466 B
YAML
|
# tasks file for ufw
|
||
|
|
---
|
||
|
|
- name: check if conntrack exists
|
||
|
|
stat:
|
||
|
|
path: /proc/sys/net/netfilter/nf_conntrack_tcp_be_liberal
|
||
|
|
register: _nf_conntrack_tcp_be_liberal
|
||
|
|
|
||
|
|
- name: fix dropped ssh sessions | configure kernel
|
||
|
|
sysctl:
|
||
|
|
name: net.netfilter.nf_conntrack_tcp_be_liberal
|
||
|
|
value: '1'
|
||
|
|
state: present
|
||
|
|
sysctl_set: true
|
||
|
|
reload: true
|
||
|
|
when: _nf_conntrack_tcp_be_liberal.stat.exists
|
||
|
|
tags:
|
||
|
|
- ufw-fix-dropped-ssh-sessions-configure-kernel
|