Only workaround if we're using the old package.

diff --git a/manifests/linux/debian.pp b/manifests/linux/debian.pp
index 2a0f7e588a1627787013c93c41796a24b1fa1a6e..4d28bc482e9da939572e5a13f2622b4659e57d5b 100644 (file)
--- a/manifests/linux/debian.pp
+++ b/manifests/linux/debian.pp
@@ -21,7 +21,8 @@ class firewall::linux::debian (
     ensure => present,
   }
 
-  if($::operatingsystemrelease =~ /^6\./ and $enable == true) {
+  if($::operatingsystemrelease =~ /^6\./ and $enable == true
+  and versioncmp($::iptables_persistent_version, '0.5.0') < 0 ) {
     # This fixes a bug in the iptables-persistent LSB headers in 6.x, without it
     # we lose idempotency
     exec { 'iptables-persistent-enable':