class firewall::rules::in::tftp ( Array[Stdlib::Port] $ports = [69], Array[Enum['tcp','udp']] $protocols = ['udp','tcp'], ) { $ports.each |$port| { $protocols.each |$proto| { nftables::rule { "default_in-tftp_${proto}_${port}": content => "${proto} dport ${port} accept", } } } }