From: Peter Palfrader <peter@palfrader.org>
Date: Fri, 6 Jul 2018 09:33:19 +0000 (+0200)
Subject: fix rule
X-Git-Url: https://git.adam-barratt.org.uk/?p=mirror%2Fdsa-puppet.git;a=commitdiff_plain;h=6d7e6d85b1410b99c246cb603d9086fd32193266

fix rule
---

diff --git a/modules/roles/manifests/security_tracker.pp b/modules/roles/manifests/security_tracker.pp
index 40ed08a76..eafe92436 100644
--- a/modules/roles/manifests/security_tracker.pp
+++ b/modules/roles/manifests/security_tracker.pp
@@ -17,7 +17,7 @@ class roles::security_tracker {
 	@ferm::rule { 'dsa-security-tracker-shape':
 		table => 'mangle',
 		chain => 'OUTPUT',
-		rule  => "proto tcp dport 443 MARK set-mark 20",
+		rule  => "proto tcp sport 443 MARK set-mark 20",
 	}
 
 	file { '/usr/local/sbin/traffic-shape':