ansible-base/roles/client_iptables/tasks/package.yml

---
- name: Firewalld NOT installed
  package:
    name: "firewalld"
    state: absent

- name: Iptables installed
  package:
    name: "iptables"
    state: present

- name: iptables-persistent installed
  package:
    name: "iptables-persistent"
    state: present
  when: ansible_os_family == "Debian"
  notify:
    - persist iptables