To clarify why I am asking how does this work...The doc has this
intriguing advise: "If you wish to ensure any reject rules are
executed last, try using stages..." Isn't the "rule order" integer in
the resource name solving that problem?

Thanks,
Mohamed.

On Tue, Nov 29, 2011 at 2:30 PM, Mohamed Lrhazi <lrh...@gmail.com> wrote:
> Hello,
>
> Could someone clarify the philosiphy of this module... I need a way to
> manage iptables on all my systmes, and trying to imagine how this
> module would fit in,
>
> How does this module work? Does it check each supplied rule, for a
> node, against its current rules, then insert rule if missing? or does
> it just inserts the rules each time it is run?
>
> How are you using this module? Do you have all "standard" rules listed
> in one class/module, then various modules inserting their own specific
> rules elsewhere (in their own manifests)?
>
> Thanks a lot,
> Mohamed.
>

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.

Reply via email to