Should this be legal?

gistfile1.pp

define sf_apache::firewall_allow::service ( $source ) {

     firewall { "080 ${title}":
         require => Class["sf_apache::config"],
         proto   => 'tcp',
         dport   => $sf_apache::config::httpd_config['Port'],
         source  => $source
     }

}


class sf_apache::config ( $httpd_config ) {

    # ...

}

class { sf_apache:
      httpd_config => {
          'MPM'                 => 'prefork',
          'StartServers'        => '10',
          'MinSpareServers'     => '10',
          'MaxSpareServers'     => '10',
          'ServerLimit'         => '256',
          'MaxClients'          => '256',
          'MaxRequestsPerChild' => '4000',
          'Port'                => ['80', '8080'] 
      }
 }

 sf_apache::firewall_allow::service { 'allow from localhost':
      source => '127.0.0.1'
 }