documentation_complete: true

title: 'Install iptables-persistent Package'

description: |-
    {{{ describe_package_install(package="iptables-persistent") }}}

rationale: |-
    A method of configuring and maintaining firewall rules is
    necessary to configure a Host Based Firewall.

severity: medium

platform: package[iptables]

ocil_clause: 'the package is not installed'

ocil: '{{{ ocil_package(package="iptables-persistent") }}}'

{{%- if 'ubuntu' in product %}}
template:
    name: package_installed_guard_var
    vars:
        pkgname: iptables-persistent
        variable: var_network_filtering_service
        value: iptables
{{%- else %}}
template:
    name: package_installed
    vars:
        pkgname: iptables-persistent
{{%- endif %}}

fixtext: |-
    {{{ describe_package_install(package="iptables-persistent") }}}
