Avoid to update ufw rules repeatedly.

The $unless in allow.pp was wrong.