Avoid to update ufw rules repeatedly

The `$unless` in allow.pp was wrong.