Try a new ferm rule class

[mirror/dsa-puppet.git] / modules / named / manifests / geodns.pp

diff --git a/modules/named/manifests/geodns.pp b/modules/named/manifests/geodns.pp
index 1611be1..49a9663 100644 (file)
--- a/modules/named/manifests/geodns.pp
+++ b/modules/named/manifests/geodns.pp
@@ -55,9 +55,9 @@ class named::geodns inherits named {
       | EOF
   }
 
-  ferm::rule { '01-dsa-bind':
-    domain      => '(ip ip6)',
+  ferm::rule::simple { '01-dsa-bind':
     description => 'Allow nameserver access',
-    rule        => '&TCP_UDP_SERVICE(53)'
+    proto       => ['udp', 'tcp'],
+    port        => 'domain',
   }
 }