fix(debian10 iptables): install iptables from buster-backports

firewalld/debian10.sls

@@ -0,0 +1,13 @@
+{% from "firewalld/map.jinja" import firewalld with context %}
+
+firewalld_repo_buster-backports:
+  pkgrepo.managed:
+    - name: deb http://deb.debian.org/debian buster-backports main
+    - file: /etc/apt/sources.list.d/buster-backports.list
+
+firewalld_install_iptables_from_buster-backports:
+  pkg.installed:
+    - name: iptables
+    - fromrepo: buster-backports
+    - version: '1.8.5*'
+    - refresh: True

firewalld/init.sls

@@ -16,6 +16,9 @@ firewalld-unsupported:
 {% elif firewalld.enabled %}
 
 include:
+  {% if grains['osfinger'] == 'Debian-10' %}
+  - firewalld.debian10
+  {% endif %}
   - firewalld.config
   - firewalld.ipsets
   - firewalld.backend