Puppet users - Sep 2013 - puppetlabs firewall module :: selective disable

I''m trying to use the puppetlabs firewall module, but I want to
selectively
enable only on certain machines.

I cant seem to override the default "$ensure = running" in the 
./modules/firewall/manifests/init.pp and linux.pp scripts.

Any suggestions would be welcome.

so far I have tried (not all at the same time), none of which work ...

# nodes file
node "puppet" {
   include "iptables"
}

# class iptables
class iptables {

  Service { ensure => stopped }

  class { [''fw::pre'', ''fw::post]: }
  class { ''firewall'': $ensure = stopped }
  class { ''firewall'': ensure => stopped }
}
 
it''s probably obvious I dont know what I''m doing .... so
I''ll save you the
time by pointing that out myself :)
iptables seems to want to start no matter what I change. 

Andrew

-- 
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to puppet-users+unsubscribe@googlegroups.com.
To post to this group, send email to puppet-users@googlegroups.com.
Visit this group at http://groups.google.com/group/puppet-users.
For more options, visit https://groups.google.com/groups/opt_out.