my (undef, $ruleset_changes) = PVE::Firewall::get_ruleset_cmdlist($ruleset, 1);
if ($ipset_changes || $ruleset_changes) {
print "detected changes\n";
my (undef, $ruleset_changes) = PVE::Firewall::get_ruleset_cmdlist($ruleset, 1);
if ($ipset_changes || $ruleset_changes) {
print "detected changes\n";