gistfile1.yml

shorewall:
  pkg:
    - installed
  cmd.wait:
    - name: service shorewall reload
    - require:
      - pkg: shorewall
      - pkg: ulogd 
      - file: shorewall_files
      - file: /etc/default/shorewall
    - watch:
      - file: shorewall_files
      - file: /etc/default/shorewall

/etc/default/shorewall:
  file.managed:
    - source: salt://shorewall/default

shorewall_files:
  file.recurse:
    - name: /etc/shorewall
    - source: salt://shorewall/configs
    - file_mode: 600

ulogd:
  pkg:
    - installed
  service:
    - running
    - require:
      - pkg: ulogd
    - watch:
      - file: /etc/ulogd.conf

/etc/ulogd.conf:
  file.managed:
      - source: salt://shorewall/ulogd.conf