class ferm::ftp { @ferm::rule { 'dsa-ftp': domain => '(ip ip6)', description => 'Allow ftp access', rule => '&SERVICE(tcp, 21)', } }