From 10df4a161694d92106eddd599d2f895e73622f1d Mon Sep 17 00:00:00 2001
From: Peter Palfrader <peter@palfrader.org>
Date: Tue, 30 Oct 2018 10:32:31 +0100
Subject: [PATCH] prevent the trailing ; after the subchain

---
 modules/fail2ban/manifests/init.pp | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/modules/fail2ban/manifests/init.pp b/modules/fail2ban/manifests/init.pp
index 8d640348a..74a650b41 100644
--- a/modules/fail2ban/manifests/init.pp
+++ b/modules/fail2ban/manifests/init.pp
@@ -24,7 +24,8 @@ class fail2ban {
 		description => 'f2b master rule',
 		chain       => 'INPUT',
 		domain      => '(ip ip6)',
-		rule        => 'saddr 0/0 @subchain "dsa-f2b" {}'
+		rule        => 'saddr 0/0 @subchain "dsa-f2b" {}',
+		notarule    => true,
 	}
 
 	# XXX Maybe this will be automatically done in buster, it is certainly needed in stretch. So maybe:  versioncmp($::lsbmajdistrelease, '9') <= 0
-- 
2.20.1