stop using virtual resources for ferm::rule

[mirror/dsa-puppet.git] / modules / ferm / manifests / ftp_conntrack.pp

diff --git a/modules/ferm/manifests/ftp_conntrack.pp b/modules/ferm/manifests/ftp_conntrack.pp
index 45e060b..87e1b0c 100644 (file)
--- a/modules/ferm/manifests/ftp_conntrack.pp
+++ b/modules/ferm/manifests/ftp_conntrack.pp
@@ -2,7 +2,7 @@ class ferm::ftp_conntrack {
        # This also works for jessie hosts, but requires a reboot
        if (versioncmp($::lsbmajdistrelease, '9') >= 0) {
                # Allow non-passive connections to an FTP server
-               @ferm::rule { 'dsa-ftp-conntrack-client':
+               ferm::rule { 'dsa-ftp-conntrack-client':
                        domain      => '(ip ip6)',
                        description => 'ftp client connection tracking',
                        table       => 'raw',
@@ -11,7 +11,7 @@ class ferm::ftp_conntrack {
                }
 
                # Allow passive connections from an FTP client
-               @ferm::rule { 'dsa-ftp-conntrack-server':
+               ferm::rule { 'dsa-ftp-conntrack-server':
                        domain      => '(ip ip6)',
                        description => 'ftp server connection tracking',
                        table       => 'raw',