# Forwarding configuration
iptables-persistent:
  pkg.installed

netfilter-persistent:
  service.running:
    - require:
      - pkg: iptables-persistent

/etc/iptables/rules.v4:
  file.managed:
    - source: salt://gateway/iptables.rules
    - makedirs: True
    - watch_in:
      - service: netfilter-persistent

/etc/iptables/rules.v6:
  file.symlink:
    - target: rules.v4
    - force: True
    - watch_in:
      - service: netfilter-persistent

net.ipv4.conf.all.forwarding:
  sysctl.present:
    - value: 1