class firewall::ppp(
  $interface = 'ppp0',
  $zone      = 'ppp'
) {
  shorewall::interface { $interface:
    zone => $zone,
  }

  if $zone == 'ppp' {
    shorewall::zone { 'ppp':
      type  => 'ipv4',
      order => 4,
    }

    shorewall::policy { 'loc-ppp':
      sourcezone      => 'loc',
      destinationzone => $zone,
      policy          => 'ACCEPT',
      order           => 30,
    }

    shorewall::policy { 'ppp-loc':
      sourcezone      => 'ppp',
      destinationzone => $zone,
      policy          => 'ACCEPT',
      order           => 31,
    }

    shorewall::policy { 'fw-ppp':
      sourcezone      => '$FW',
      destinationzone => $zone,
      policy          => 'ACCEPT',
      order           => 32,
    }
  }
}