re-enable flush + fix force input

defaults/main.yml

@@ -9,7 +9,7 @@ iptables_services: ['iptables', 'ip6tables']
 
 iptables_do_save: true
 
-iptables_do_clean: false
+iptables_do_clean: true
 iptables_tables_to_clean: [ 'raw', 'filter', 'nat', 'mangle', 'security' ]
 
 iptables_open_port_out: [ 22, 80, 443 ]

tasks/clean.yml

 ---
 
+# TODO: find a cleaner way to handle this
+# because if we flush filter and input policy is set to DROP
+# then ansible next ssh cnx for next task will not work
+- name: Set Policy
+  ansible.builtin.iptables:
+    chain: INPUT
+    policy: ACCEPT
+    ip_version: "{{ ip_version }}"
+  tags:
+    - molecule-idempotence-notest
+
+# we want to flush because we don't want to save fail2ban or docker rule
 - name: Flush Tables
   ansible.builtin.iptables:
     table: "{{ item }}"