and actually quote correctly

Signed-off-by: Stephen Gran <steve@lobefin.net>

diff --git a/modules/apache2/manifests/init.pp b/modules/apache2/manifests/init.pp
index 03f29bd17d07c1099272aec036ba0c4aecc0e961..1f413569c910a45ab6bad8dea705463460f1ed1d 100644 (file)
--- a/modules/apache2/manifests/init.pp
+++ b/modules/apache2/manifests/init.pp
@@ -130,7 +130,7 @@ class apache2 {
                refreshonly => true,
        }
         ferm::rule { "dsa-apache":
-                domain          => (ip ip6),
+                domain          => "(ip ip6)",
                 description     => "Allow web access",
                 rule            => "proto tcp mod state state (NEW) dport (80) ACCEPT"
         }

diff --git a/modules/exim/manifests/init.pp b/modules/exim/manifests/init.pp
index 4acee3b695a551c3eb158d3d48c78841fcdca13f..8ab4f625545f67355ed6de0d57f31aeaa4d88dec 100644 (file)
--- a/modules/exim/manifests/init.pp
+++ b/modules/exim/manifests/init.pp
@@ -157,7 +157,7 @@ class exim {
         refreshonly => true,
     }
     ferm::rule { "dsa-exim":
-            domain          => (ip ip6),
+            domain          => "(ip ip6)",
             description     => "Allow smtp access",
             rule            => "proto tcp mod state state (NEW) dport (25) ACCEPT"
     }

diff --git a/modules/munin-node/manifests/init.pp b/modules/munin-node/manifests/init.pp
index c8727dde20b3b11b961489fbb3c9a54ee7b32233..0849cc1bd235e6ca98075e7e7dc63ca28444fc43 100644 (file)
--- a/modules/munin-node/manifests/init.pp
+++ b/modules/munin-node/manifests/init.pp
@@ -76,7 +76,7 @@ class munin-node {
         refreshonly => true,
     }
     ferm::rule { "dsa-munin":
-            domain          => (ip ip6),
+            domain          => "(ip ip6)",
             description     => "Allow munin from munin master",
             rule            => "proto tcp mod state state (NEW) dport (munin) @subchain 'munin' { saddr (\$HOST_MUNIN) ACCEPT; }"
     }

diff --git a/modules/nagios/manifests/client.pp b/modules/nagios/manifests/client.pp
index 7fcbb03da1cf9e9cc50d9627a4bb18c5cb87e03f..053c6dc6b83a03ec7a8a9eaf08fa65f736930470 100644 (file)
--- a/modules/nagios/manifests/client.pp
+++ b/modules/nagios/manifests/client.pp
@@ -46,7 +46,7 @@ class nagios::client inherits nagios {
                refreshonly => true,
        }
         ferm::rule { "dsa-nagios":
-                domain          => (ip ip6),
+                domain          => "(ip ip6)",
                 description     => "Allow nrpe from nagios master",
                 rule            => "proto tcp mod state state (NEW) dport (5666) @subchain 'nagios' { saddr (\$HOST_NAGIOS) ACCEPT; }"
         }

diff --git a/modules/named/manifests/init.pp b/modules/named/manifests/init.pp
index 9c4b82b1a71717522df53841a5a50eb77a80485f..0bbcde3219923f6ee5da64b60712a20da357aa4e 100644 (file)
--- a/modules/named/manifests/init.pp
+++ b/modules/named/manifests/init.pp
@@ -26,7 +26,7 @@ class named {
                         ;
         }
         ferm::rule { "dsa-bind":
-                domain          => (ip ip6),
+                domain          => "(ip ip6)",
                 description     => "Allow nameserver access",
                 rule            => "proto (udp tcp) mod state state (NEW) dport (53) ACCEPT"
         }

diff --git a/modules/ntp/manifests/init.pp b/modules/ntp/manifests/init.pp
index a499bb638a23f56e8b60a20c27f627aced151324..fb564641f51d6887accdd6492a39ecd4e583bd38 100644 (file)
--- a/modules/ntp/manifests/init.pp
+++ b/modules/ntp/manifests/init.pp
@@ -26,7 +26,7 @@ class ntp {
                refreshonly => true,
        }
         ferm::rule { "dsa-ntp":
-                domain          => (ip ip6),
+                domain          => "(ip ip6)",
                 description     => "Allow ntp access",
                 rule            => "proto udp mod state state (NEW) dport (123) ACCEPT"
         }