diff --git a/firewall/manifests/init.pp b/firewall/manifests/init.pp
index 3b77ed4..e870c22 100644
--- a/firewall/manifests/init.pp
+++ b/firewall/manifests/init.pp
@@ -7,11 +7,16 @@
 #
 # for example:
 #
-#     tcp/80 192.168.1.0/24
+#     $firewall_rules = [ "tcp/22 192.168.1.0/24",
+#                         "tcp/80", ]
 #
 # If source is left out the service will be opened to all connecting
 # hosts.
 #
+# Custom rules can be defined into variable $firewall_custom:
+#
+#     $firewall_custom = [ "pass in quick carp", ]
+#
 class firewall {
 
     case $operatingsystem {