diff --git a/roles/ldap_server/files/ferm_ldap.conf b/roles/ldap_server/files/ferm_ldap.conf
index e831f4bd9a91941cbafde64a6e03c0ea3dc42182..2bae1070dfa3b19213bea24baea7a1e1879504cc 100644
--- a/roles/ldap_server/files/ferm_ldap.conf
+++ b/roles/ldap_server/files/ferm_ldap.conf
@@ -1,6 +1,8 @@
-table filter {
-    chain INPUT {
-        proto tcp dport 389 ACCEPT;
-        proto tcp dport 636 ACCEPT;
+domain (ip ip6) {
+    table filter {
+        chain INPUT {
+            proto tcp dport 389 ACCEPT;
+            proto tcp dport 636 ACCEPT;
+        }
     }
-}
\ No newline at end of file
+}