stop using virtual resources for ferm::rule

[mirror/dsa-puppet.git] / modules / roles / manifests / security_tracker.pp

diff --git a/modules/roles/manifests/security_tracker.pp b/modules/roles/manifests/security_tracker.pp
index 1e93e29..4aa4219 100644 (file)
--- a/modules/roles/manifests/security_tracker.pp
+++ b/modules/roles/manifests/security_tracker.pp
@@ -10,7 +10,7 @@ class roles::security_tracker {
        # security-tracker abusers
        #  66.170.99.1  20180706 excessive number of requests
        #  66.170.99.2  20180706 excessive number of requests
-       @ferm::rule { 'dsa-sectracker-abusers':
+       ferm::rule { 'dsa-sectracker-abusers':
                prio  => "005",
                rule  => "saddr (66.170.99.1 66.170.99.2) DROP",
        }
@@ -27,7 +27,7 @@ class roles::security_tracker {
        }
 
        # traffic shaping http traffic
-       #@ferm::rule { 'dsa-security-tracker-shape':
+       #ferm::rule { 'dsa-security-tracker-shape':
        #       table => 'mangle',
        #       chain => 'OUTPUT',
        #       rule  => "proto tcp sport 443 MARK set-mark 20",