class firewall::implementations::shorewall::ups { shorewall::rule { "ups": action => 'ACCEPT', source => 'net', destination => '$FW', proto => 'tcp', destinationport => "3551", ratelimit => '-', order => 200, } }