Bug 2229802

.`firewall` RHEL System Role supports variables related to `ipsets` With this update of the `firewall` RHEL System Role, you can define, modify, and delete `ipsets`. Also, you can add and remove those `ipsets` from firewall zones. Alternatively, you can use those `ipsets` when defining firewall rich rules. You can manage `ipsets` with the `firewall` RHEL System Role using the following variables: * `ipset` * `ipset_type` * `ipset_entries` * `short` * `description` * `state: present` or `state: absent` * `permanent: true` The following are some notable benefits of this enhancement: * You can reduce the complexity of the rich rules that define rules for many IP addresses. * You can add or remove IP addresses from sets as needed without modifying multiple rules. For more details, see resources in the `/usr/share/doc/rhel-system-roles/firewall/` directory.