change default forward drop to use the correct chain

diff --git a/examples/iptables/test.pp b/examples/iptables/test.pp
index 01bf2353f3eba8ef5b49007ad2c0336890f0daa2..e8dc156350fb25c34a0114a000ce20188e4ef08f 100644 (file)
--- a/examples/iptables/test.pp
+++ b/examples/iptables/test.pp
@@ -79,7 +79,7 @@ firewall { '055 INPUT allow DNS':
 }
 
 firewall { '999 FORWARD drop':
-  chain => 'OUTPUT',
+  chain => 'FORWARD',
   jump => 'DROP'
 }