# firewall rules needed

**URL:** <https://forum.ansible.com/t/firewall-rules-needed/26087>\
**Category:** AWX Project\
**Created:** [November 21, 2017, 2:11am UTC](https://forum.ansible.com/t/firewall-rules-needed/26087 "2017-11-21T02:11:34Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Hai\_Wu](https://avatars.discourse-cdn.com/v4/letter/h/94ad74/32.png) [@Hai\_Wu](https://forum.ansible.com/u/Hai_Wu)\
**Post date:** [November 21, 2017, 2:11am UTC](https://forum.ansible.com/t/firewall-rules-needed/26087/1 "2017-11-21T02:11:34Z")

</div>

What kind of firewall rules would be needed to get this going in an enterprise environment with security lock down in place, and there’s no proxy option for this?

It seems it needs to have access to at least docker hub, and epel yum url (not sure exactly what this url would be), this is very painful to try to get this going inside enterprise environment, and there’s no documentation on how to do this.

---

<div class="post-metadata">

**Author:** ![matburt](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/matburt/32/3612_2.png) [@matburt](https://forum.ansible.com/u/matburt)\
**Post date:** [November 21, 2017, 11:46am UTC](https://forum.ansible.com/t/firewall-rules-needed/26087/2 "2017-11-21T11:46:19Z")

</div>

There is indeed a proxy option on the installer [https://github.com/ansible/awx/blob/devel/installer/inventory#L71](https://github.com/ansible/awx/blob/devel/installer/inventory#L71)

It does indeed require some external access, but it’s entirely possible to get all of these components and build locally. If you are interested in an enterprise/supported version you’ll want to have a look at Ansible Tower (which, coincidentally, comes with a bundle/offline installer).

---

<div class="post-metadata">

**Author:** ![Hai\_Wu](https://avatars.discourse-cdn.com/v4/letter/h/94ad74/32.png) [@Hai\_Wu](https://forum.ansible.com/u/Hai_Wu)\
**Post date:** [November 21, 2017, 5:42pm UTC](https://forum.ansible.com/t/firewall-rules-needed/26087/3 "2017-11-21T17:42:15Z")

</div>

It would be awesome if you could provide steps to get all the components and build locally… I know the proxy option, it does not work for me as we don’t use proxy.

---

<div class="post-metadata">

**Author:** ![matburt](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/matburt/32/3612_2.png) [@matburt](https://forum.ansible.com/u/matburt)\
**Post date:** [November 21, 2017, 6:43pm UTC](https://forum.ansible.com/t/firewall-rules-needed/26087/4 "2017-11-21T18:43:13Z")

</div>

Sorry about that, I don’t have time to help you out directly with this but maybe someone else does. Or if you figure it out on your own then you can share it with the group.
