iptables_rules_v4:
  filter:
    INPUT:
      policy: DROP
      rules:
        - "-i lo -j ACCEPT"
        - "-m state --state RELATED,ESTABLISHED -j ACCEPT"
        - "-p icmp -m icmp --icmp-type any -j ACCEPT"
        - "-p tcp -m tcp --dport 22 -j ACCEPT"
    FORWARD:
      policy: ACCEPT
    OUTPUT:
      policy: ACCEPT
iptables_rules_v6:
  filter:
    INPUT:
      policy: DROP
      rules:
        - "-i lo -j ACCEPT"
        - "-m state --state RELATED,ESTABLISHED -j ACCEPT"
        - "-p ipv6-icmp -j ACCEPT"
        - "-p tcp -m tcp --dport 22 -j ACCEPT"
    FORWARD:
      policy: ACCEPT
    OUTPUT:
      policy: ACCEPT
iptables_reload_on_update: true