diff --git a/manifests/site.pp b/manifests/site.pp
index 8b7640d08b..5dd045077c 100644
--- a/manifests/site.pp
+++ b/manifests/site.pp
@@ -266,7 +266,9 @@ node "planet.openstack.org" {
 
 # A bare machine, but with a jenkins user
 node /^.*\.template\.openstack\.org$/ {
-  include openstack_template
+  class { 'openstack_template':
+    iptables_public_tcp_ports => []
+  }
   # This sets up a user with jenkins ssh key and adds it to the sudo group.
   # Don't do that on regular jenkins slaves, only on lowest-privilege test
   # hosts, such as the devstack hosts.