From ab8cef50f499f241ac20018ac45f94073b40cc90 Mon Sep 17 00:00:00 2001
From: Arne Teuke <arne_teuke@confdroid.com>
Date: Tue, 3 Feb 2026 15:34:55 +0100
Subject: [PATCH] OP#410 fix fw

---
 manifests/firewall/iptables.pp | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/manifests/firewall/iptables.pp b/manifests/firewall/iptables.pp
index bbb8d75..3a0f3bb 100644
--- a/manifests/firewall/iptables.pp
+++ b/manifests/firewall/iptables.pp
@@ -8,13 +8,13 @@ class confdroid_apache::firewall::iptables (
 ) inherits confdroid_apache::params {
   if $ae_manage_fw == true {
     firewall { "${ae_order_no}${ae_http_port} tcp http port ${ae_http_port}":
-      proto => 'all',
+      proto => 'tcp',
       dport => $ae_http_port,
       jump  => 'accept',
   }
 
     firewall { "${ae_order_no}${ae_https_port} tcp http port ${ae_https_port}":
-      proto => 'all',
+      proto => 'tcp',
       dport => $ae_https_port,
       jump  => 'accept',
     }