From: Morgan Haskel Date: Tue, 31 Mar 2015 15:26:06 +0000 (-0400) Subject: purge clarifications X-Git-Tag: 1.6.0~20^2 X-Git-Url: https://review.fuel-infra.org/gitweb?a=commitdiff_plain;h=5e8eaed93b6ded504d93f8797eb0917fd9255be8;p=puppet-modules%2Fpuppetlabs-firewall.git purge clarifications --- diff --git a/README.markdown b/README.markdown index 42eab8e..91fb5cb 100644 --- a/README.markdown +++ b/README.markdown @@ -135,7 +135,7 @@ Rules are persisted automatically between reboots, although there are known issu purge => true } ``` - **Note** - If there are unmanaged rules in unmanaged chains it will take two Puppet runs before the firewall chain is purged. + **Note** - If there are unmanaged rules in unmanaged chains it will take two Puppet runs before the firewall chain is purged. This is different than the `purge` parameter available in `firewallchain`. 2.) Use the following code to set up the default parameters for all of the firewall rules you will establish later. These defaults will ensure that the `pre` and `post` classes are run in the correct order to avoid locking you out of your box during the first Puppet run. @@ -721,6 +721,14 @@ firewallchain { 'INPUT:filter:IPv4': * `purge`: Purge unmanaged firewall rules in this chain. Valid values are 'false', 'true'. +**Note** This `purge` is purging unmanaged rules in a firewall chain, not unmanaged firewall chains. To purge unmanaged firewall chains, use the following instead. + +```puppet +resources { 'firewallchain': + purge => true +} +``` + ###Fact: ip6tables_version A Facter fact that can be used to determine what the default version of ip6tables is for your operating system/distribution.