Port custom firewall rule to nftables

[chef.git] / cookbooks / openssh / recipes / default.rb

diff --git a/cookbooks/openssh/recipes/default.rb b/cookbooks/openssh/recipes/default.rb
index 06a88e8b5613a9d8a31b353c2ef37f0b3e158f2e..6a299d22695dc7d9d2804e4fab876984a2e95a48 100644 (file)
--- a/cookbooks/openssh/recipes/default.rb
+++ b/cookbooks/openssh/recipes/default.rb
@@ -86,6 +86,6 @@ firewall_rule "accept-ssh" do
   action :accept
   source "net"
   dest "fw"
   action :accept
   source "net"
   dest "fw"

-  proto "tcp:syn"
+  proto "tcp"

   dest_ports node[:openssh][:port]
 end
   dest_ports node[:openssh][:port]
 end