- # This also works for jessie hosts, but requires a reboot
- if (versioncmp($::lsbmajdistrelease, '9') >= 0) {
- # Allow non-passive connections to an FTP server
- ferm::rule { 'dsa-ftp-conntrack-client':
- domain => '(ip ip6)',
- description => 'ftp client connection tracking',
- table => 'raw',
- chain => 'OUTPUT',
- rule => 'proto tcp dport 21 CT helper ftp'
- }
+ # Allow non-passive connections to an FTP server
+ ferm::rule { 'dsa-ftp-conntrack-client':
+ domain => '(ip ip6)',
+ description => 'ftp client connection tracking',
+ table => 'raw',
+ chain => 'OUTPUT',
+ rule => 'proto tcp dport 21 CT helper ftp'
+ }