do it as a define so we can easily pass multiple target zones

diff --git a/manifests/rules/out/ekeyd.pp b/manifests/rules/out/ekeyd.pp
index ef6f20a200af8809e7be1b4827a761cc3727cb61..858dca4b630c197286d27634968c65ba6cd4d514 100644 (file)
--- a/manifests/rules/out/ekeyd.pp
+++ b/manifests/rules/out/ekeyd.pp
@@ -1,11 +1,10 @@
-class shorewall::rules::out::ekeyd($ekeyd_host) {
-  shorewall::rule { 'me-net-tcp_ekeyd':
+define shorewall::rules::out::ekeyd($ekeyd_host) {
+  shorewall::rule { "me-${name}-tcp_ekeyd":
     source          => '$FW',
-    destination     => "net:${ekeyd_host}",
+    destination     => "${name}:${ekeyd_host}",
     proto           => 'tcp',
     destinationport => '8888',
     order           => 240,
     action          => 'ACCEPT';
   }
 }
-