Allow non-port rules about puppet-firewalld HOT 3 CLOSED

It seems to work with this (I use hiera and interface-classes, so there may be errors in my refactoring here):

firewalld::custom_services { 'keepalived':
    ensure => 'present',
    description => 'Protocol for vrrp/keepalived',
    port => {'protocol' => 'vrrp'},
}

firewalld_rich_rule {'keepalived':
    ensure => 'present',
    zone => 'public',
    dest => '224.0.0.18',
    action => 'accept',
    service => 'keepalived',
}

from puppet-firewalld.

I think what you are trying to do is declare the 'protocol' element

firewalld_rich_rule { 'Accept VRRP traffic':
        ensure  => present,
        zone    => 'public',
        protocol => 'vrrp',
        action  => 'accept',
}

This was not possible before due to protocol being missing from the elements part of the rich rule and has been fixed in #48

from puppet-firewalld.

Closing this now as released in 2.2.0 - please re-open if you still have the issue

from puppet-firewalld.