+#
+#This class manages iptables on debian
class firewall::linux::debian (
$ensure = running,
$enable = true
ensure => present,
}
- if($operatingsystemrelease =~ /^6\./ and $enable == true) {
+ if($::operatingsystemrelease =~ /^6\./ and $enable == true) {
# This fixes a bug in the iptables-persistent LSB headers in 6.x, without it
# we lose idempotency
exec { 'iptables-persistent-enable':
logoutput => on_failure,
- command => '/usr/sbin/update-rc.d iptables-persistent enable',
- unless => '/usr/bin/test -f /etc/rcS.d/S*iptables-persistent',
- require => Package['iptables-persistent'],
+ command => '/usr/sbin/update-rc.d iptables-persistent enable',
+ unless => '/usr/bin/test -f /etc/rcS.d/S*iptables-persistent',
+ require => Package['iptables-persistent'],
}
} else {
# This isn't a real service/daemon. The start action loads rules, so just
# needs to be called on system boot.
service { 'iptables-persistent':
- ensure => undef,
- enable => $enable,
+ ensure => undef,
+ enable => $enable,
hasstatus => true,
- require => Package['iptables-persistent'],
+ require => Package['iptables-persistent'],
}
}
}