do it as a define so we can easily pass multiple target zones

manifests/rules/out/ekeyd.pp

-class shorewall::rules::out::ekeyd($ekeyd_host) {
-  shorewall::rule { 'me-net-tcp_ekeyd':
+define shorewall::rules::out::ekeyd($ekeyd_host) {
+  shorewall::rule { "me-${name}-tcp_ekeyd":
     source          => '$FW',
-    destination     => "net:${ekeyd_host}",
+    destination     => "${name}:${ekeyd_host}",
     proto           => 'tcp',
     destinationport => '8888',
     order           => 240,
     action          => 'ACCEPT';
   }
 }
-