---
# Активируем защиту от IP-спуфинга.
- ansible.posix.sysctl:
    name: net.ipv4.conf.default.rp_filter
    value: 1
    state: present
    sysctl_file: /etc/sysctl.d/ip_spoofing.conf
- ansible.posix.sysctl:
    name: net.ipv4.conf.all.rp_filter
    value: 1
    state: present
    sysctl_file: /etc/sysctl.d/ip_spoofing.conf
- ansible.posix.sysctl:
    name: net.ipv4.conf.lo.rp_filter
    value: 1
    state: present
    sysctl_file: /etc/sysctl.d/ip_spoofing.conf