description => 'f2b master rule',
chain => 'INPUT',
domain => '(ip ip6)',
- rule => 'saddr 0/0 @subchain "dsa-f2b" {}'
+ rule => 'saddr 0/0 @subchain "dsa-f2b" {}',
+ notarule => true,
}
# XXX Maybe this will be automatically done in buster, it is certainly needed in stretch. So maybe: versioncmp($::lsbmajdistrelease, '9') <= 0