class firewall::implementations::shorewall::pppoe(
  $packages  = false,
  $local_dev = false,
) {
  # Manage pppoe packages, requires nodo module
  if $packages == true {
    include nodo::utils::network::pppoe
  }

  # Define device in the local zone
  if $local_dev == true{
    shorewall::interface { "eth0":
     zone    => 'loc',
     rfc1918 => false,
     options => 'tcpflags,blacklist,routefilter,nosmurfs,logmartians',
    }
  }

  # See http://shorewall.net/two-interface.htm
  augeas { 'clampmss':
    changes => 'set /files/etc/shorewall/shorewall.conf/CLAMPMSS Yes',
    lens    => 'Shellvars.lns',
    incl    => '/etc/shorewall/shorewall.conf',
    notify  => Service[shorewall];
  }
}