From cea019720e12c2b9bd6416fdd99f7246f16f710b Mon Sep 17 00:00:00 2001 From: Martin Zobel-Helas Date: Thu, 9 May 2013 21:27:23 +0200 Subject: [PATCH] try to order ferm rules Signed-off-by: Martin Zobel-Helas --- modules/named/manifests/init.pp | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/modules/named/manifests/init.pp b/modules/named/manifests/init.pp index a2dde9d3c..9f1c7f908 100644 --- a/modules/named/manifests/init.pp +++ b/modules/named/manifests/init.pp @@ -16,13 +16,13 @@ class named { ensure => running, } - @ferm::rule { 'dsa-bind-no-ddos-any': + @ferm::rule { '00-dsa-bind-no-ddos-any': domain => '(ip ip6)', description => 'Allow nameserver access', rule => 'proto udp dport 53 mod string from 32 to 64 algo bm hex-string \'|0000ff0001|\' jump DROP' } - @ferm::rule { 'dsa-bind': + @ferm::rule { '01-dsa-bind': domain => '(ip ip6)', description => 'Allow nameserver access', rule => '&TCP_UDP_SERVICE(53)' -- 2.20.1