---
- name: copy iptables.rules
  copy:
      src: iptables.rules
      dest: /etc/iptables/iptables.rules
  register: iptables_rules

- name: start and enable iptables service
  when: iptables_rules.changed
  systemd:
      name: iptables.service
      enabled: yes
      state: reloaded

- name: copy ip6tables.rules
  copy:
      src: ip6tables.rules
      dest: /etc/iptables/ip6tables.rules
  register: ip6tables_rules

- name: start and enable ip6tables service
  when: ip6tables_rules.changed
  systemd:
      name: ip6tables.service
      enabled: yes
      state: reloaded