class { 'ferm':
    rules => {
        '01 policy drop' => {
            policy => 'drop',
            action => '',
        },
       '02 allow ssh' => {
            proto => 'tcp',
            dport => '22',
       },
    }
}