Installed and configured the puppetlabs/firewall - but during the deployment (puppet agent --test) I receive warnings like these ones:
info: Retrieving plugin
info: Loading facts in /var/lib/puppet/lib/facter/iptables_persistent_version.rb
info: Loading facts in /var/lib/puppet/lib/facter/puppet_vardir.rb
info: Loading facts in /var/lib/puppet/lib/facter/iptables_version.rb
info: Loading facts in /var/lib/puppet/lib/facter/facter_dot_d.rb
info: Loading facts in /var/lib/puppet/lib/facter/pe_version.rb
info: Loading facts in /var/lib/puppet/lib/facter/ip6tables_version.rb
info: Loading facts in /var/lib/puppet/lib/facter/root_home.rb
info: Caching catalog for demo
info: /Firewall[000 accept all packets]: Provider iptables does not support features hop_limiting; not managing attribute hop_limit
info: /Firewall[000 accept all packets]: Provider iptables does not support features ishasmorefrags; not managing attribute ishasmorefrags
info: /Firewall[000 accept all packets]: Provider iptables does not support features islastfrag; not managing attribute islastfrag
info: /Firewall[000 accept all packets]: Provider iptables does not support features isfirstfrag; not managing attribute isfirstfrag
info: /Firewall[000 accept all packets]: Provider iptables does not support features mask; not managing attribute mask
info: /Firewall[050 reject port 8090]: Provider iptables does not support features hop_limiting; not managing attribute hop_limit
info: /Firewall[050 reject port 8090]: Provider iptables does not support features ishasmorefrags; not managing attribute ishasmorefrags
info: /Firewall[050 reject port 8090]: Provider iptables does not support features islastfrag; not managing attribute islastfrag
info: /Firewall[050 reject port 8090]: Provider iptables does not support features isfirstfrag; not managing attribute isfirstfrag
info: /Firewall[050 reject port 8090]: Provider iptables does not support features mask; not managing attribute mask
Apparently the features hop_limiting, ishasmorefrags, islastfrag, isfirstfrag, mask are no supported for some strange reason.
OS: Ubuntu 12.04.4 LTS
Iptables version: iptables v1.4.12
facter: 1.6.17
puppet client: 2.7.11
puppetmaster: 3.1.1
↧