- name: Ping to Host "{{ inventory_hostname }}" ansible.builtin.ping: - name: ADD Firewall Role Ports 22,8006 for Primary Interface ansible.builtin.shell: iptables -t nat -A PREROUTING -i $(ip route get 8.8.8.8 | sed -n 's/.* dev \([^\ ]*\) .*/\1/p') -p tcp -m multiport ! --dport 22,8006 -j DNAT --to 10.0.0.2 - name: ADD Firewall Role Ports UDP for Primary Interface ansible.builtin.shell: iptables -t nat -A PREROUTING -i $(ip route get 8.8.8.8 | sed -n 's/.* dev \([^\ ]*\) .*/\1/p') -p udp -j DNAT --to 10.0.0.2 - name: ADD Firewall Role Privat Network ansible.builtin.shell: iptables -t nat -A POSTROUTING -s '10.0.0.0/30' -o $(ip route get 8.8.8.8 | sed -n 's/.* dev \([^\ ]*\) .*/\1/p') -j MASQUERADE - name: ADD IPv4 Forwarding ansible.builtin.shell: echo 1 > /proc/sys/net/ipv4/ip_forward