From 27db7591d7e440d1652204db9cc4cc6ae1b35be9 Mon Sep 17 00:00:00 2001
From: Timo Makinen <tmakinen@foo.sh>
Date: Wed, 1 Feb 2017 13:13:43 +0200
Subject: [PATCH] firewall: Fix service name for Ubuntu 16.04.

---
 firewall/manifests/init.pp | 21 ++++++++++++++++-----
 1 file changed, 16 insertions(+), 5 deletions(-)

diff --git a/firewall/manifests/init.pp b/firewall/manifests/init.pp
index 7f32cc1..3ca648d 100644
--- a/firewall/manifests/init.pp
+++ b/firewall/manifests/init.pp
@@ -171,13 +171,24 @@ class firewall::common::iptables {
         require => Package["iptables"],
         notify  => Service["iptables"],
     }
+    case $::operatingsystem {
+        "ubuntu": {
+            if versioncmp($::operatingsystemrelease, "16.04") < 0 {
+                $service = "iptables-persistent"
+            } else {
+                $service = "netfilter-persistent"
+            }
+        }
+        "debian": {
+            $service = "iptables-persistent"
+        }
+        default: {
+            $service = "iptables"
+        }
+    }
     service { "iptables":
         ensure  => running,
-        name    => $::operatingsystem ? {
-            "debian" => "iptables-persistent",
-            "ubuntu" => "iptables-persistent",
-            default  => "iptables",
-        },
+        name    => $service,
         alias   => $::operatingsystem ? {
             "debian" => "ip6tables",
             "ubuntu" => "ip6tables",