my (undef, undef, $ipset_changes) = PVE::Firewall::get_ipset_cmdlist($ipset_ruleset);
my (undef, $ruleset_changes) = PVE::Firewall::get_ruleset_cmdlist($ruleset);
my (undef, undef, $ipset_changes) = PVE::Firewall::get_ipset_cmdlist($ipset_ruleset);
my (undef, $ruleset_changes) = PVE::Firewall::get_ruleset_cmdlist($ruleset);