flush create {{ whitelist_ip4_name }} hash:net maxelem 65536 {% for white_ip4 in whitelist_ip4 %} add {{ whitelist_ip4_name }} {{ white_ip4 }} {% endfor %} create {{ whitelist_ip6_name }} hash:ip family inet6 {% for white_ip6 in whitelist_ip6 %} add {{ whitelist_ip6_name }} {{ white_ip6 }} {% endfor %} create {{ whitelist_ports_tcp }} bitmap:port range 0-65535 {% for port_tcp in whitelist_public_tcp_port %} add {{ whitelist_ports_tcp }} {{ port_tcp }} {% endfor %} create {{ whitelist_ports_udp }} bitmap:port range 0-65535 {% for port_udp in whitelist_public_udp_port %} add {{ whitelist_ports_udp }} {{ port_udp }} {% endfor %} {{ ansible_managed | comment }}