Firewall Rules Check with Ansible

[marcalfa1]

I have a firewall with about 50 rules and constantly growing. Is there a way I can create a playbook to test whether a source host can connect to a destination host on a specific port?

If that is possible I can create a playbook similar to my firewall rules so next time we make a change to the firewall, I can quickly validate all the rules using my ansible playbook.

Currently, my environment is  Windows and Linux and telnet client is installed/enabled on every host. 

[Kai Stian Olstad]

Check out the wait_for module
https://docs.ansible.com/ansible/latest/wait_for_module.html

--
Kai Stian Olstad

[marcalfa1]

[marcalfa1]

I had a chance to check the wait_for module. Let say my ansible controller is HOST3 and I have two other VMs, let's call them HOST1 and HOST2.  From my ansible controller (HOST3), can I create a playbook to check if HOST1 can connect to HOST2  over port 80? If that's possible, is there an example that shows how this playbook should look like.

Thanks in advance.

-mm

[Kai Stian Olstad]

On Sunday, 25 February 2018 04.23.46 CET marcalfa1 wrote:
> I had a chance to check the wait_for module. Let say my ansible controller
> is HOST3 and I have two other VMs, let's call them HOST1 and HOST2. From
> my ansible controller (HOST3), can I create a playbook to check if HOST1
> can connect to HOST2 over port 80? If that's possible, is there an example
> that shows how this playbook should look like.

If host1 is Linux yes, if it's Windows I don't know.

---
- hosts: host1
tasks:
- wait_for:
host: host2
port: 80
timeout: 10
ignore_errors: true
register: result

- debug: var=result


--
Kai Stian Olstad

[marcalfa1]

I tried your example and getting the following result.  Is an inventory file needed since all the hosts being defined in the playbook?


[WARNING]: Could not match supplied host pattern, ignoring: all

 [WARNING]: provided hosts list is empty, only localhost is available

 [WARNING]: Could not match supplied host pattern, ignoring: HOST1

PLAY [HOST1] ********************************************************
skipping: no hosts matched

On Thursday, February 22, 2018 at 4:26:38 PM UTC-5, marcalfa1 wrote:

[Varun Chopra]

Yes, the playbook looks up hosts in the inventory file.