Fix mangling of chain names that contain -f

puppetlabs · Nov 16, 2015 · e36ecf4 · e36ecf4
1 parent d1f0347
commit e36ecf4
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/puppet/provider/firewall/iptables.rb b/lib/puppet/provider/firewall/iptables.rb
@@ -356,7 +356,7 @@ def self.rule_to_hash(line, table, counter)
         # -f requires special matching:
         # only replace those -f that are not followed by an l to
         # distinguish between -f and the '-f' inside of --tcp-flags.
-        values = values.sub(/-f(?!l)(?=.*--comment)/, '-f true')
+        values = values.sub(/\s-f(?!l)(?=.*--comment)/, ' -f true')
       else
         values = values.sub(/#{resource_map[bool]}/, "#{resource_map[bool]} true")
       end