firewall.pp

# Hinterlegt iptables-Konfiguration für den Host
class ubuntu_server::firewall($firewall_scripts_pre_up='puppet:///modules/ubuntu_server/etc/network/if-pre-up.d/') {
    File{
        owner => 'root',
        group => 'root',
        mode => 0755,
    }

    Exec{
        path => $::path,
    }

    file{'/etc/network/if-pre-up.d/':
        ensure  => present,
        source  => $firewall_scripts_pre_up,
        recurse => remote,
        notify  => Exec['mark_firewall_reboot'],
    }

    exec{'mark_firewall_reboot':
        command     => 'touch /var/run/reboot-required',
        refreshonly => true,
    }

}