From a9dc91784463647c6d070ade91302f2a3e25bb6c Mon Sep 17 00:00:00 2001 From: Sharif Nassar Date: Wed, 7 Aug 2013 14:22:53 -0700 Subject: [PATCH] Only workaround if we're using the old package. --- manifests/linux/debian.pp | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/manifests/linux/debian.pp b/manifests/linux/debian.pp index 2a0f7e5..4d28bc4 100644 --- a/manifests/linux/debian.pp +++ b/manifests/linux/debian.pp @@ -21,7 +21,8 @@ class firewall::linux::debian ( ensure => present, } - if($::operatingsystemrelease =~ /^6\./ and $enable == true) { + if($::operatingsystemrelease =~ /^6\./ and $enable == true + and versioncmp($::iptables_persistent_version, '0.5.0') < 0 ) { # This fixes a bug in the iptables-persistent LSB headers in 6.x, without it # we lose idempotency exec { 'iptables-persistent-enable': -- 2.45.2