class ferm::aql {
- @ferm::rule { 'dsa-drop-multicast':
+ ferm::rule { 'dsa-drop-multicast':
domain => 'ip',
description => 'drop multicast traffic to avoid triggering protection',
table => 'filter',
chain => 'OUTPUT',
- rule => 'destination 224.0.0.0/24 jump log_or_drop'
+ rule => 'destination 224.0.0.0/4 jump log_or_drop'
}
}