Should remove unmanaged rules

[OrangeDog]

Removing an item from pillar does not remove the corresponding rules.
This state appears only able to add rules.

[ZakHargz]

+1 for this, it would be nice for the rule to be removed upon the pillar data being removed.

[ZakHargz]

We can include this within the "_states/ufw.py"

`import subprocess

subprocess.check_call('yes|ufw reset',
shell=True, executable='/bin/bash')
`

That fixes the problem (for the interim) it'll reset the rules and then re-apply from your Pillar data.

[OrangeDog]

ufw reset will cause an interruption of service though. Especially bad if you drop your salt connection.

[ZakHargz]

The better solution would be to write a rule removal in python? Is this something you've done?

[OrangeDog]

You would need to enumerate the current rules, compare them to the managed rules in some way, and remove the ones that don't match.