path => "/etc/init.d:/usr/bin:/usr/sbin:/bin:/sbin",
refreshonly => true,
}
- ferm::rule { "dsa-ntp":
- domain => (ip ip6),
+ @ferm::rule { "dsa-ntp":
+ domain => "(ip ip6)",
description => "Allow ntp access",
- rule => "proto udp mod state state (NEW) dport (123) ACCEPT"
+ rule => "&SERVICE(udp, 123)"
}
}
+# vim:set et:
+# vim:set sts=4 ts=4:
+# vim:set shiftwidth=4: