X-Git-Url: https://git.donarmstrong.com/?a=blobdiff_plain;f=modules%2Funbound%2Fmanifests%2Finit.pp;fp=modules%2Funbound%2Fmanifests%2Finit.pp;h=aa63a5d6c566ea746361fa3b2d269603e399e02e;hb=f55f0d6c7ecfc2a40dd73dc8252fde691818f189;hp=06395fc9c20c433078496318b4f1dedb1720a414;hpb=04c5cdd5e829b50329ef7bebb51c1f9697de397a;p=dsa-puppet.git

diff --git a/modules/unbound/manifests/init.pp b/modules/unbound/manifests/init.pp
index 06395fc9..aa63a5d6 100644
--- a/modules/unbound/manifests/init.pp
+++ b/modules/unbound/manifests/init.pp
@@ -10,6 +10,7 @@ class unbound {
 
 	$is_recursor   = getfromhash($site::nodeinfo, 'misc', 'resolver-recursive')
 	$client_ranges = hiera('allow_dns_query')
+	$empty_client_range = empty($client_ranges)
 	$ns            = hiera('nameservers')
 
 	package { 'unbound':
@@ -55,7 +56,7 @@ class unbound {
 		notify  => Service['unbound']
 	}
 
-	if ($is_recursor and not empty($client_ranges)) {
+	if ($is_recursor and not $empty_client_range) { 
 		@ferm::rule { 'dsa-dns':
 			domain      => 'ip',
 			description => 'Allow nameserver access',