class firewall {
  include shorewall

  shorewall::rule { "ssh-02":
    action          => 'DNAT',
    source          => 'net',
    destination     => "vm:192.168.0.$context:22",
    proto           => 'tcp',
    destinationport => "22$id",
    ratelimit       => '-',
    order           => "202",
  }
}