fixed ufw in port optional logic

Signed-off-by: Mark Bolwell <[email protected]>
ansible-lockdown · Jul 19, 2023 · cb9ea8c · cb9ea8c
1 parent bf78a73
commit cb9ea8c
Showing 1 changed file with 4 additions and 3 deletions.
diff --git a/tasks/section_3/cis_3.5.1.x.yml b/tasks/section_3/cis_3.5.1.x.yml
@@ -164,10 +164,11 @@
       rule: allow
       direction: in
       from_ip: '{{ item.from }}'
-      to_port: '{{ item.ports }}'
+      to_port: '{{ item.port }}'
       proto: '{{ item.proto }}'
-  loop:
-      - "{{ ubtu20cis_ufw_allow_in }}"
+  loop: "{{ ubtu20cis_ufw_allow_in }}"
+  loop_control:
+      label: "{{ item.port }}"
   notify: reload ufw
   when: ufw_add_incoming
   tags: