file { "/etc/sysconfig/iptables":
source => "puppet:///config/poker/iptables_sps",
mode => 644,
owner => root,
group => root,
ensure => present,
notify => Service[iptables]
}
service { "iptables":
hasrestart => true,
ensure => running,
enable => true
}