class roles::bugs_web { include apache2 ssl::service { 'bugs.debian.org': notify => Exec['service apache2 reload'], key => true, } ferm::rule { 'dsa-bugs-abusers': prio => '005', rule => 'saddr (220.243.135/24 220.243.136/24) DROP', } }