From 4000f7a2173fb5eb97ec7f2423006045981cb515 Mon Sep 17 00:00:00 2001
From: Peter Palfrader <peter@palfrader.org>
Date: Thu, 9 Sep 2010 18:08:53 +0200
Subject: [PATCH] kerberos is also a udp service

---
 modules/ferm/manifests/per-host.pp | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/modules/ferm/manifests/per-host.pp b/modules/ferm/manifests/per-host.pp
index f4abeb198..193d701c3 100644
--- a/modules/ferm/manifests/per-host.pp
+++ b/modules/ferm/manifests/per-host.pp
@@ -132,7 +132,7 @@ class ferm::per-host {
             @ferm::rule { "dsa-krb-kdc":
                 domain          => "(ip ip6)",
                 description  => "kerberos KDC",
-                rule         => "&SERVICE(tcp, kerberos)"
+                rule         => "&TCP_UDP_SERVICE(kerberos)"
             }
         }
     }
-- 
2.20.1