X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Fnamed%2Fmanifests%2Finit.pp;h=9f1c7f908faee7a6a6a200863eaae1d693f390ea;hb=b04f07aa1c6df0e99c46278ab4ce59d841072451;hp=a2dde9d3c863e7c651e2a567d7140da9efea142f;hpb=1a2b96081cd2d9f1492630b1ebb60331e7db5a06;p=mirror%2Fdsa-puppet.git diff --git a/modules/named/manifests/init.pp b/modules/named/manifests/init.pp index a2dde9d3c..9f1c7f908 100644 --- a/modules/named/manifests/init.pp +++ b/modules/named/manifests/init.pp @@ -16,13 +16,13 @@ class named { ensure => running, } - @ferm::rule { 'dsa-bind-no-ddos-any': + @ferm::rule { '00-dsa-bind-no-ddos-any': domain => '(ip ip6)', description => 'Allow nameserver access', rule => 'proto udp dport 53 mod string from 32 to 64 algo bm hex-string \'|0000ff0001|\' jump DROP' } - @ferm::rule { 'dsa-bind': + @ferm::rule { '01-dsa-bind': domain => '(ip ip6)', description => 'Allow nameserver access', rule => '&TCP_UDP_SERVICE(53)'