I just went through this last week. This isn't available in the stable 0.4 release from puppetforge, you need to get the current master branch from https://github.com/kbarber/puppetlabs-firewall
Once you get this, you can do this: firewallchain { 'INPUT:filter:IPv4': policy => 'drop', } Note I've not tried formatting my rules as you have, but the above worked for me. Also note that this has only been in the master branch in Github for about a week, so if you find a bug, please submit it. - Chris On Monday, March 26, 2012 3:10:37 PM UTC-4, Trevor Vaughan wrote: > > The documentation seems to indicate that I can do something like: > > firewallchain { ':INPUT:IP': policy => 'drop' } > > But this doesn't work. > > Thanks, > > Trevor > > -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To view this discussion on the web visit https://groups.google.com/d/msg/puppet-users/-/XWwujXKgFFMJ. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.