class firewall::virtual::dns(
  $implementation = lookup('firewall::implementation', undef, undef, 'shorewall'),
  $destination, $zone = 'vm'
) {
  class { "firewall::implementations::${implementation}::virtual::dns":
    destination => $destination,
    zone        => $zone,
  }
}