Loop through IPs listed in an attribute array or hash. about iptables-ng

[chr4]

This is actually pretty simple.
As stated in the Docs, the rule attribute of the iptables_ng_rule provider also accepts an Array.
You can use map to create the desired result:

iptables_ng_rule 'add_ips' do
  chain 'FWR'
  rule ips.map { |ip| "-s #{ip} -j ACCEPT" }

  # As the source specified above is ipv4, this rule cannot be applied to ip6tables.
  # Therefore, setting ip_version to 4
  ip_version 4
end

I should probably add this to the README for future reference.
Does this solves your problem?

[chr4]

Also note, that having whitespace in the name is a bad idea, as it translates into the filename.
A future version might automatically escape whitespaces to underscores, but currently that's not the case.

[chr4]

I added this example to the README.
Another note: If you use the --source parameter with ipv4 addresses, you will most likely have to restrict this ruleset to ipv4 only. You can do so using the ip_version 4 attribute.
I updated the example to reflect that.

[Joseph-R]

Great, thanks Chris! Really appreciate your responsiveness on this.

iptables_ng_rule 'add_ips' do
  chain 'FWR'
  rule ips.map { |ip| "-s #{ip} -j ACCEPT" }
  ip_version 4
end

This worked great for us, and removing the whitespace from rule names was also a good idea.

Thanks again for your input! I appreciate you updating your docs as well.