1
2
3
4
5
6
7
8
9

  if defined("firewall") and tagged("iptables") {
    firewall { "500 allow ssh inbound traffic":
      state => "NEW",
      notify => Exec["iptables-save"],
      dport => 22,
      proto => "tcp",
      require => Class["iptables"],
    }
  }