move DROP blacklists to ferm prio 005, after munin

[mirror/dsa-puppet.git] / modules / roles / manifests / security_tracker.pp

diff --git a/modules/roles/manifests/security_tracker.pp b/modules/roles/manifests/security_tracker.pp
index 0e94dd8..8e60d7c 100644 (file)
--- a/modules/roles/manifests/security_tracker.pp
+++ b/modules/roles/manifests/security_tracker.pp
@@ -11,7 +11,7 @@ class roles::security_tracker {
        #  66.170.99.1  20180706 excessive number of requests
        #  66.170.99.2  20180706 excessive number of requests
        @ferm::rule { 'dsa-sectracker-abusers':
-               prio  => "000",
+               prio  => "005",
                rule  => "saddr (66.170.99.1 66.170.99.2) DROP",
        }