I believe you have stumbled into the same issue I ran into when attempting to workaround this with defined resources and unfortunately I had to continue using the legacy bobsh-iptables module as a result (which has its own inherent issues but at least properly accepts an array in source.)
It is rather disheartening to see the puppet-firewall module stuck with these limitations, but I do understand the difficulty in making this work as we expect so it's a trade off. -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To view this discussion on the web visit https://groups.google.com/d/msg/puppet-users/-/yD0KGhayF14J. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
