Open Firewall Ports (incoming)

[makefu]

• Feature [x]

Summary of Request
Right now the ansible scripts allow to open outgoing firewall ports, however most if the time the configuration of incoming ports is more relevant. for this the ansible role could have a variable ubtu20cis_ufw_allow_in_ports which is used to programmatically configure incoming ports in a similar fashion

Describe alternatives you've considered
to implement this feature we currently perform firewall opening as extra steps after the ansible-lockdown role is run

Suggested Code

- name: "add incoming ports"
  ufw:
    rule: allow
    direction: in
    to_port: '{{ item }}'
  with_items:
    - "{{ ubtu20cis_ufw_allow_in_ports }}"
  notify: reload ufw

[uk-bolly]

hi @makefu

Thank you for raising the enhancement to the ubunt20cis role. Apologies for the time is has taken to address this.
I will be adding this enhancement to the Feb23_updates branch over the next couple of days.
I have changed it slightly but you will find it listed in the defaults/main with the ufw options.

If you could please let us know how you get on.

Many thanks in advance

uk-bolly

[uk-bolly]

hi @makefu

Thank you again for raising this issue and great enhancement. This has now been merged into the devel branch. Aiming to put this into main if all is well in the next couple of weeks.

many thanks again

uk-bolly

[MrSteve81]

This was added to PR #74 that addressed a lot of fixes. This has been merged to main. Thanks @makefu for the find.