![如何在 ansible 中正确定义 ip6tables 规则](https://linux22.com/image/778076/%E5%A6%82%E4%BD%95%E5%9C%A8%20ansible%20%E4%B8%AD%E6%AD%A3%E7%A1%AE%E5%AE%9A%E4%B9%89%20ip6tables%20%E8%A7%84%E5%88%99.png)
在当前系统上,我有此 ip6tables 规则
-A INPUT -d <ip6address> -p udp -m udp --dport <port> -m state --state NEW -j ACCEPT
对于新系统,我编写了一个 ansible 剧本:
- name: Allow someport for ipv6
ansible.builtin.iptables:
chain: INPUT
protocol: udp
match: udp
ip_version: ipv6
ctstate: NEW
destination_port: 'port'
destination: 'ip6address'
jump: ACCEPT
tags:
- iptables6
但是当我尝试播放这个时出现错误:
{... "stderr_lines": ["ip6tables v1.8.7 (nf_tables): unknown option \"--destination-port\"", "Try `ip6tables -h' or 'ip6tables --help' for more information."], "stdout": "", "stdout_lines": []}
- Ansible 2.10.8
- Debian 11
如何正确定义这个规则?