- name: Persist ipv4 rules
  become: yes
  copy:
    content: "{{ iptables_rules.stdout }}"
    dest: "/etc/sysconfig/iptables"

- name: Persist ipv6 rules
  become: yes
  copy:
    content: "{{ ip6tables_rules.stdout }}"
    dest: "/etc/sysconfig/ip6tables"

# This provides the systemd unit file for iptables which might not be installed
- name: Ensure iptables-services is installed
  become: yes
  package:
    name: iptables-services
    state: present

- name: Ensure iptables is started
  become: yes
  service:
    name: iptables
    state: started
    enabled: yes