firewalld rich rule error if already defined

Archives Ansible Project
1

Got something interesting there,

I have firewalld rules like this:

- - name: Ensure FirewallD is started and enabled
  service: name=firewalld state=started enabled=yes

- - name: Enabling firewalld on MariaDB Server
  firewalld: rich_rule="rule port port={{ item.port }} protocol={{
item.proto }} family='ipv4' source address={{ item.address }} accept"
permanent=true immediate=yes state=enabled
  with_items:
     - { port: 3306, address: 192.168.2.0/24, proto: tcp }
     - { port: 4567, address: 192.168.2.0/24, proto: tcp }
     - { port: 4568, address: 192.168.2.0/24, proto: tcp }
     - { port: 4444, address: 192.168.2.0/24, proto: tcp }
     - { port: 4567, address: 192.168.2.0/24, proto: udp }
  ignore_errors: True

should I use `ignore_errors: True` ? If not, the result will be error
if the port already enabled.

I use ansible 1.9.4.