class ferm::ftp_conntrack {
-
# Allow non-passive connections to an FTP server
- @ferm::rule { 'dsa-ftp-conntrack-client':
+ ferm::rule { 'dsa-ftp-conntrack-client':
domain => '(ip ip6)',
description => 'ftp client connection tracking',
table => 'raw',
}
# Allow passive connections from an FTP client
- @ferm::rule { 'dsa-ftp-conntrack-server':
+ ferm::rule { 'dsa-ftp-conntrack-server':
domain => '(ip ip6)',
description => 'ftp server connection tracking',
table => 'raw',