switch weblogsync to other ssh facter

[mirror/dsa-puppet.git] / modules / ferm / manifests / aql.pp

diff --git a/modules/ferm/manifests/aql.pp b/modules/ferm/manifests/aql.pp
index b5578e2..466252f 100644 (file)
--- a/modules/ferm/manifests/aql.pp
+++ b/modules/ferm/manifests/aql.pp
@@ -1,10 +1,10 @@
 class ferm::aql {
-       @ferm::rule { 'dsa-drop-multicast':
+       ferm::rule { 'dsa-drop-multicast':
                domain      => 'ip',
                description => 'drop multicast traffic to avoid triggering protection',
                table       => 'filter',
                chain       => 'OUTPUT',
-               rule        => 'destination 224.0.0.0/24 jump log_or_drop'
+               rule        => 'destination 224.0.0.0/4 jump log_or_drop'
        }
 }