import "shorewall" class firewall { include shorewall shorewall::rule { "ssh-02": action => 'DNAT', source => 'net', destination => "vm:192.168.0.$context:22", proto => 'tcp', destinationport => "22$id", ratelimit => '-', order => "202", } }