From fdd9ae60934a50c9cd2221af3b9945574eb9ef23 Mon Sep 17 00:00:00 2001
From: Eimhin Laverty <eimhin.laverty@puppet.com>
Date: Wed, 20 Mar 2019 16:34:11 +0000
Subject: [PATCH] (MODULES-8547) Fix existing rules with --dport not parsing

---
 lib/puppet/provider/firewall/iptables.rb | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lib/puppet/provider/firewall/iptables.rb b/lib/puppet/provider/firewall/iptables.rb
index ce01c28..f2951a7 100644
--- a/lib/puppet/provider/firewall/iptables.rb
+++ b/lib/puppet/provider/firewall/iptables.rb
@@ -129,7 +129,7 @@ Puppet::Type.type(:firewall).provide :iptables, parent: Puppet::Provider::Firewa
     string_from: '--from',
     string_to: '--to',
     table: '-t',
-    tcp_flags: '-m tcp --tcp-flags',
+    tcp_flags: ['-m tcp --tcp-flags', '--tcp-flags'],
     todest: '--to-destination',
     toports: '--to-ports',
     tosource: '--to-source',
-- 
2.45.2