Recommit for updates in build 10

doc/puppet_classes/confdroid_ssh_3A_3Afirewall_3A_3Aiptables.html

@@ -113,7 +113,16 @@
 15
 16
 17
-18</pre>
+18
+19
+20
+21
+22
+23
+24
+25
+26
+27</pre>
       </td>
       <td>
         <pre class="code"><span class="info file"># File 'manifests/firewall/iptables.pp', line 6</span>
@@ -121,7 +130,7 @@
 class confdroid_ssh::firewall::iptables (
 
 ) inherits confdroid_ssh::params {
-  if $ssh_use_firewall {
+  if $ssh_use_firewall == true {
     firewall { &quot;${ssh_fw_order}${ssh_fw_port} allow SSH on port ${ssh_fw_port}&quot;:
       ensure =&gt; &#39;present&#39;,
       proto  =&gt; &#39;tcp&#39;,
@@ -130,6 +139,15 @@ class confdroid_ssh::firewall::iptables (
       jump   =&gt; &#39;accept&#39;,
     }
   }
+  else {
+    firewall { &quot;${ssh_fw_order}${ssh_fw_port} remove SSH on port ${ssh_fw_port}&quot;:
+      ensure =&gt; &#39;absent&#39;,
+      proto  =&gt; &#39;tcp&#39;,
+      source =&gt; $ssh_source_range,
+      dport  =&gt; $ssh_fw_port,
+      jump   =&gt; &#39;accept&#39;,
+    }
+  }
 }</pre>
       </td>
     </tr>

doc/puppet_classes/confdroid_ssh_3A_3Aparams.html

@@ -79,6 +79,8 @@
       
       <span class='object_link'><a href="confdroid_ssh_3A_3Aselinux_3A_3Asemanage.html" title="puppet_classes::confdroid_ssh::selinux::semanage (puppet_class)">confdroid_ssh::selinux::semanage</a></span><br/>
       
+      <span class='object_link'><a href="confdroid_ssh_3A_3Afirewall_3A_3Aiptables.html" title="puppet_classes::confdroid_ssh::firewall::iptables (puppet_class)">confdroid_ssh::firewall::iptables</a></span><br/>
+      
     </dd>
   </dl>