class firewall::redirect::ssh( $implementation = lookup('firewall::implementation', undef, undef, 'shorewall'), $destinationport, ) { class { "firewall::implementations::${implementation}::redirect::ssh": destinationport => $destinationport, } }