X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Fnamed%2Fmanifests%2Finit.pp;h=9f1c7f908faee7a6a6a200863eaae1d693f390ea;hb=52ab75241aa59786d9cf7af14dc99c8ee1641483;hp=a2dde9d3c863e7c651e2a567d7140da9efea142f;hpb=3e4e0946835e0ca9b9167b38ac17949754a0f120;p=mirror%2Fdsa-puppet.git diff --git a/modules/named/manifests/init.pp b/modules/named/manifests/init.pp index a2dde9d3c..9f1c7f908 100644 --- a/modules/named/manifests/init.pp +++ b/modules/named/manifests/init.pp @@ -16,13 +16,13 @@ class named { ensure => running, } - @ferm::rule { 'dsa-bind-no-ddos-any': + @ferm::rule { '00-dsa-bind-no-ddos-any': domain => '(ip ip6)', description => 'Allow nameserver access', rule => 'proto udp dport 53 mod string from 32 to 64 algo bm hex-string \'|0000ff0001|\' jump DROP' } - @ferm::rule { 'dsa-bind': + @ferm::rule { '01-dsa-bind': domain => '(ip ip6)', description => 'Allow nameserver access', rule => '&TCP_UDP_SERVICE(53)'