aboutsummaryrefslogtreecommitdiffstatshomepage
path: root/roles/firewall/README.md
diff options
context:
space:
mode:
Diffstat (limited to '')
-rw-r--r--roles/firewall/README.md7
1 files changed, 7 insertions, 0 deletions
diff --git a/roles/firewall/README.md b/roles/firewall/README.md
new file mode 100644
index 0000000..9c1a572
--- /dev/null
+++ b/roles/firewall/README.md
@@ -0,0 +1,7 @@
+This role configures iptables rules in /etc/iptables/rules.v{4,6} to be used by
+iptables-persistent.
+
+I found it easier and more flexible to configure a firewall this way; for
+example, I found that cloud provider's firewalls are often less flexible.
+iptables frontends like ufw, on the other hand, are hard to make work with
+Docker.