Avoid to update ufw rules repeatly.

The $unless in allow.pp was wrong.