--- /dev/null	Thu Jan 01 00:00:00 1970 +0000
+++ b/modules/firewall/spec/unit/classes/firewall_linux_debian_spec.rb	Sat Mar 14 20:58:03 2015 +0000
@@ -0,0 +1,87 @@
+require 'spec_helper'
+
+describe 'firewall::linux::debian', :type => :class do
+  context "Debian 7" do
+    let(:facts) {{
+        :osfamily              => 'Debian',
+        :operatingsystem       => 'Debian',
+        :operatingsystemrelease => '7.0'
+    }}
+    it { should contain_package('iptables-persistent').with(
+      :ensure => 'present'
+    )}
+    it { should contain_service('iptables-persistent').with(
+      :ensure   => nil,
+      :enable   => 'true',
+      :require  => 'Package[iptables-persistent]'
+    )}
+  end
+
+  context 'deb7 enable => false' do
+    let(:facts) {{
+        :osfamily              => 'Debian',
+        :operatingsystem       => 'Debian',
+        :operatingsystemrelease => '7.0'
+    }}
+    let(:params) {{ :enable => 'false' }}
+    it { should contain_service('iptables-persistent').with(
+      :enable   => 'false'
+    )}
+  end
+
+  context "Debian 8" do
+    let(:facts) {{
+        :osfamily              => 'Debian',
+        :operatingsystem       => 'Debian',
+        :operatingsystemrelease => 'jessie/sid'
+    }}
+    it { should contain_package('iptables-persistent').with(
+      :ensure => 'present'
+    )}
+    it { should contain_service('netfilter-persistent').with(
+      :ensure   => nil,
+      :enable   => 'true',
+      :require  => 'Package[iptables-persistent]'
+    )}
+  end
+
+  context 'deb8 enable => false' do
+    let(:facts) {{
+        :osfamily              => 'Debian',
+        :operatingsystem       => 'Debian',
+        :operatingsystemrelease => 'jessie/sid'
+    }}
+    let(:params) {{ :enable => 'false' }}
+    it { should contain_service('netfilter-persistent').with(
+      :enable   => 'false'
+    )}
+  end
+
+  context "Debian 8, alt operatingsystem" do
+    let(:facts) {{
+        :osfamily               => 'Debian',
+        :operatingsystem        => 'Debian',
+        :operatingsystemrelease => '8.0'
+    }}
+    it { should contain_package('iptables-persistent').with(
+      :ensure => 'present'
+    )}
+    it { should contain_service('netfilter-persistent').with(
+      :ensure   => nil,
+      :enable   => 'true',
+      :require  => 'Package[iptables-persistent]'
+    )}
+  end
+
+  context 'deb8, alt operatingsystem, enable => false' do
+    let(:facts) {{
+        :osfamily               => 'Debian',
+        :operatingsystem        => 'Debian',
+        :operatingsystemrelease => '8.0'
+    }}
+    let(:params) {{ :enable => 'false' }}
+    it { should contain_service('netfilter-persistent').with(
+      :enable   => 'false'
+    )}
+  end
+end