}
if ($is_recursor and !$empty_client_range) {
- @ferm::rule { 'dsa-dns':
+ ferm::rule { 'dsa-dns':
domain => 'ip',
description => 'Allow nameserver access',
rule => sprintf('&TCP_UDP_SERVICE_RANGE(53, (%s))', join_spc(filter_ipv4($client_ranges))),
}
- @ferm::rule { 'dsa-dns6':
+ ferm::rule { 'dsa-dns6':
domain => 'ip6',
description => 'Allow nameserver access',
rule => sprintf('&TCP_UDP_SERVICE_RANGE(53, (%s))', join_spc(filter_ipv6($client_ranges))),