From ba5683864abd381427019b22b1ab0ec7956bb48a Mon Sep 17 00:00:00 2001
From: Christoph <ckubu@oopen.de>
Date: Mon, 29 Jun 2026 08:20:02 +0200
Subject: [PATCH] Add sudo to iptables-save commands in migration guide for
 proper permissions

---
 roles/ipt-server/MIGRATION.md | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/roles/ipt-server/MIGRATION.md b/roles/ipt-server/MIGRATION.md
index 17e32f6..92fd445 100644
--- a/roles/ipt-server/MIGRATION.md
+++ b/roles/ipt-server/MIGRATION.md
@@ -138,10 +138,10 @@ ansible-playbook ipt-server.yml --limit ${HOSTNAME}
 **Verifizieren:** Jetzt die neuen Rules mit dem gesicherten Stand vergleichen:
 
 ```bash
-ssh ${HOSTNAME} '
-  iptables-save  | grep -v "^#" | sed "s/\[[0-9]*:[0-9]*\]/[0:0]/g" \
+ssh -t ${HOSTNAME} '
+  sudo iptables-save  | grep -v "^#" | sed "s/\[[0-9]*:[0-9]*\]/[0:0]/g" \
     > /tmp/fw_after_v4.rules
-  ip6tables-save | grep -v "^#" | sed "s/\[[0-9]*:[0-9]*\]/[0:0]/g" \
+  sudo ip6tables-save | grep -v "^#" | sed "s/\[[0-9]*:[0-9]*\]/[0:0]/g" \
     > /tmp/fw_after_v6.rules
   echo "=== IPv4 diff ==="
   diff /tmp/fw_before_v4.rules /tmp/fw_after_v4.rules