Ipv6 rules are now properly saved on RedHat based systems

Author: mikegleasonjr

Vagrantfile

@@ -14,6 +14,11 @@ boxes = {
     :cpu => "2",
     :ram => "256"
   },
+  "centos/6" => {
+    :ip  => '192.168.33.13',
+    :cpu => "2",
+    :ram => "256"
+  },
 }
 
 Vagrant.configure("2") do |config|

tasks/persist-debian.yml

@@ -16,20 +16,10 @@
   changed_when: false
   ignore_errors: yes
 
-- name: Save v4 rules (netfilter-persistent)
+- name: Save rules (netfilter-persistent)
   command: netfilter-persistent save
-  when: v4_script|changed and is_netfilter.rc == 0
+  when: (v4_script|changed or v6_script|changed) and is_netfilter.rc == 0
 
-- name: Save v4 rules (iptables-persistent)
+- name: Save rules (iptables-persistent)
   command: /etc/init.d/iptables-persistent save
-  when: v4_script|changed and is_netfilter.rc == 1
-
-- name: Save v6 rules (netfilter-persistent)
-  command: netfilter-persistent save
-  when: v6_script|changed and is_netfilter.rc == 0
-
-- name: Save v6 rules (iptables-persistent)
-  command: /etc/init.d/iptables-persistent save
-  when: v6_script|changed and is_netfilter.rc == 1
-
-
+  when: (v4_script|changed or v6_script|changed) and is_netfilter.rc == 1

tasks/persist-redhat.yml

@@ -4,7 +4,7 @@
   when: v4_script|changed
 
 - name: Save v6 rules (/etc/sysconfig/ip6tables)
-  shell: iptables-save -c > /etc/sysconfig/ip6tables
+  shell: ip6tables-save -c > /etc/sysconfig/ip6tables
   when: v6_script|changed
 
 - name: Ensure iptables service is installed
@@ -17,3 +17,7 @@
 
 - name: Ensure iptables service is enabled & started
   service: name=iptables enabled=yes state=started
+
+- name: Ensure ip6tables service is enabled & started
+  service: name=ip6tables enabled=yes state=started
+  when: firewall_v6_configure