add udp custom port config

defaults/main.yml

@@ -20,6 +20,12 @@ iptables_open_port_in: []
 iptables_close_port_out: []
 iptables_close_port_in: []
 
+iptables_open_udp_port_out: [53]
+iptables_open_udp_port_in: [53]
+
+iptables_close_udp_port_out: []
+iptables_close_udp_port_in: []
+
 iptables_forward_policy: DROP
 iptables_output_policy: ACCEPT
 iptables_input_policy: DROP

tasks/custom.yml

@@ -35,3 +35,39 @@
     jump: ACCEPT
     ip_version: "{{ ip_version }}"
   loop: "{{ iptables_open_port_in }}"
+
+- name: Deny Custom Udp Out
+  ansible.builtin.iptables:
+    chain: OUTPUT
+    protocol: 'udp'
+    destination_port: "{{ item }}"
+    jump: DROP
+    ip_version: "{{ ip_version }}"
+  loop: "{{ iptables_close_udp_port_out }}"
+
+- name: Deny Custom Udp In
+  ansible.builtin.iptables:
+    chain: INPUT
+    protocol: 'udp'
+    destination_port: "{{ item }}"
+    jump: DROP
+    ip_version: "{{ ip_version }}"
+  loop: "{{ iptables_close_udp_port_in }}"
+
+- name: Allow Custom Udp Out
+  ansible.builtin.iptables:
+    chain: OUTPUT
+    protocol: 'udp'
+    destination_port: "{{ item }}"
+    jump: ACCEPT
+    ip_version: "{{ ip_version }}"
+  loop: "{{ iptables_open_udp_port_out }}"
+
+- name: Allow Custom Udp In
+  ansible.builtin.iptables:
+    chain: INPUT
+    protocol: 'udp'
+    destination_port: "{{ item }}"
+    jump: ACCEPT
+    ip_version: "{{ ip_version }}"
+  loop: "{{ iptables_open_udp_port_in }}"