With the transition to the ufw state instead of ufw_simple we got several important goodies:
- time of firewall state application
- hard reset of manually added rules
- no need to delete old rules
But, one unpleasant moment appeared: if the pillars contain an error, the firewall may remain in an inferior state after use.
A way was found within the state to check for errors in the pillars (https://github.com/sysadmws/sysadmws-formula/blob/master/ufw/init.sls#L1), now the state is executed only if there are no errors.