From 2ce573e8098414b2c7ffee185fc5f51952cc7e27 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Timo=20M=E4kinen?= <tmakinen@foo.sh>
Date: Wed, 8 May 2013 11:04:31 +0300
Subject: [PATCH] firewall: Do not start ip6tables when no IPv6 addres is
 configured.

---
 firewall/manifests/init.pp | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/firewall/manifests/init.pp b/firewall/manifests/init.pp
index bccfb4f..62cdc2f 100644
--- a/firewall/manifests/init.pp
+++ b/firewall/manifests/init.pp
@@ -161,7 +161,7 @@ class firewall::common::iptables {
         require => Package["iptables"],
     }
 
-    if $ip6tables {
+    if $ip6tables and $::ipaddress6 {
         file { $ip6tables:
             ensure  => present,
             mode    => "0600",
@@ -207,7 +207,7 @@ class firewall::iptables inherits firewall::common::iptables {
         content => template("firewall/iptables.erb"),
     }
 
-    if $firewall::common::iptables::ip6tables {
+    if $firewall::common::iptables::ip6tables and $::ipaddress6 {
         File[$firewall::common::iptables::ip6tables] {
             content => template("firewall/ip6tables.erb"),
         }