Seph, Ken,

Thanks for your patches on this module ! I love the --comment idea. I
will definitely pull this asap.

> You shouldn't need the 'before' in the 'iptables' resource. Not quite
> sure why its not executing, but how about this ...

I do know why it's not executing: unfortunately this iptables type
isn't able to notify other resources. I wasn't able to figure out
quickly how this should be done, and never really got back to it...

I'm not too comfortable with the idea of directly calling iptables-save
in the ruby code and saving the output into a file. IMHO, the point of
saving the output to a file is to be able to load the firewall at boot
time, and the way this is done is distribution specific. I think this
should be left out of the ruby part, and maybe put in some puppet class
which does the right thing for each distribution. But of course, notify
needs to be fixed first...

Any pointer on this is very welcome: what sort of magic must be put in
a puppet type to allow it to send notification to other resources once
it has run ?

Thanks !
Marc


-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To post to this group, send email to puppet-us...@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.

Reply via email to