From c426366b9b7f3bf6e405997ece777c9074069e9f Mon Sep 17 00:00:00 2001 From: Stephen Gran Date: Sat, 20 Feb 2010 20:21:55 +0000 Subject: [PATCH] might work better Signed-off-by: Stephen Gran --- modules/ferm/manifests/init.pp | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/modules/ferm/manifests/init.pp b/modules/ferm/manifests/init.pp index 5bedd6c9f..78becb9a5 100644 --- a/modules/ferm/manifests/init.pp +++ b/modules/ferm/manifests/init.pp @@ -35,7 +35,8 @@ class ferm { ferm::rule { "dsa-ssh": description => "Allow SSH from DSA", - rule => "domain (ip ip6) proto tcp mod state state (NEW) dport (ssh) @subchain 'ssh' { saddr (\$SSH_SOURCES) ACCEPT; }" + domain => "(ip ip6)", + rule => "proto tcp mod state state (NEW) dport (ssh) @subchain 'ssh' { saddr (\$SSH_SOURCES) ACCEPT; }" } exec { "ferm restart": -- 2.20.1