ansible/roles/iptables/tasks/main.yml

- name: Upload ip{{ iptables_ver }}tables template {{ iptables_tmpl }}
  template:
    src: "../{{ iptables_tmpl }}.j2"
    dest: "{{ iptables_file }}"
    owner: "{{ iptables_user }}"
    group: "{{ iptables_group }}"
    mode: "{{ iptables_mode }}"
  register: iptables_updated
- name: Activate ip{{ iptables_ver }}tables
  command:
    argv:
      - "ip{{ iptables_ver }}tables-restore"
      - -w
      - 2
      - "{{ iptables_file }}"
  when: iptables_updated.changed