From 50b70b781af325b85e8c74e8b3549896348c0b5b Mon Sep 17 00:00:00 2001 From: "Christopher E. Stith" Date: Tue, 23 Oct 2018 19:52:27 -0500 Subject: [PATCH] add -g flag handling in ip6tables.rb provider In lib/puppet/provider/firewall/ip6tables.rb there is no goto: entry for the -g flag in @resource_map which leads to errors for rules using that feature. lib/puppet/type/firewall.rb already handles this flag. It's a one-line change to recognize it. The right rules then get into the chains in my testing. --- lib/puppet/provider/firewall/ip6tables.rb | 1 + 1 file changed, 1 insertion(+) diff --git a/lib/puppet/provider/firewall/ip6tables.rb b/lib/puppet/provider/firewall/ip6tables.rb index d3c1b3c..29151e7 100644 --- a/lib/puppet/provider/firewall/ip6tables.rb +++ b/lib/puppet/provider/firewall/ip6tables.rb @@ -77,6 +77,7 @@ Puppet::Type.type(:firewall).provide :ip6tables, parent: :iptables, source: :ip6 dst_type: '--dst-type', gateway: '--gateway', gid: '--gid-owner', + goto: '-g', hop_limit: '-m hl --hl-eq', icmp: '-m icmp6 --icmpv6-type', iniface: '-i', -- 2.45.2