From 22a7b2a9f6343df02a548eae2c70b686ae3cd4b1 Mon Sep 17 00:00:00 2001
From: Robert Wolf <robert.wolf@abacus.ch>
Date: Tue, 30 Sep 2025 13:55:08 +0200
Subject: [PATCH] fix description

---
 lib/puppet/type/firewall.rb | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lib/puppet/type/firewall.rb b/lib/puppet/type/firewall.rb
index de9276026..f757c5bbe 100644
--- a/lib/puppet/type/firewall.rb
+++ b/lib/puppet/type/firewall.rb
@@ -1461,7 +1461,7 @@
     hashlimit_dstmask: {
       type: 'Optional[Integer[0,32]]',
       desc: <<-DESC
-      When --hashlimit-mode srcip is used, all destination addresses encountered will be grouped according to the given prefix length
+      When --hashlimit-mode dstip is used, all destination addresses encountered will be grouped according to the given prefix length
       and the so-created subnet will be subject to hashlimit.
       Prefix must be between (inclusive) 0 and 32.
       Note that --hashlimit-dstmask 0 is basically doing the same thing as not specifying srcip for --hashlimit-mode, but is technically more expensive.