(MODULES-8547) Fix existing rules with --dport not parsing

diff --git a/lib/puppet/provider/firewall/iptables.rb b/lib/puppet/provider/firewall/iptables.rb
index ce01c282742511e243934400fd272e35ed530b0b..f2951a7dce9ae0bd0cc709a58a946821ee782f72 100644 (file)
--- a/lib/puppet/provider/firewall/iptables.rb
+++ b/lib/puppet/provider/firewall/iptables.rb
@@ -129,7 +129,7 @@ Puppet::Type.type(:firewall).provide :iptables, parent: Puppet::Provider::Firewa
     string_from: '--from',
     string_to: '--to',
     table: '-t',
-    tcp_flags: '-m tcp --tcp-flags',
+    tcp_flags: ['-m tcp --tcp-flags', '--tcp-flags'],
     todest: '--to-destination',
     toports: '--to-ports',
     tosource: '--to-source',