def ex_create_firewall_rule(self, network_domain, rule, position,
                                position_relative_to_rule=None):
        positions_without_rule = ('FIRST', 'LAST')
        positions_with_rule = ('BEFORE', 'AFTER')

        create_node = ET.Element('createFirewallRule', {'xmlns': TYPES_URN})
        ET.SubElement(create_node, "networkDomainId").text = \
            self._network_domain_to_network_domain_id(network_domain)
        ET.SubElement(create_node, "name").text = rule.name
        ET.SubElement(create_node, "action").text = rule.action
        ET.SubElement(create_node, "ipVersion").text = rule.ip_version
        ET.SubElement(create_node, "protocol").text = rule.protocol
        # Setup source port rule
        source = ET.SubElement(create_node, "source")
        if rule.source.address_list_id is not None:
            source_ip = ET.SubElement(source, 'ipAddressListId')
            source_ip.text = rule.source.address_list_id
        else:
            source_ip = ET.SubElement(source, 'ip')
            if rule.source.any_ip:
                source_ip.set('address', 'ANY')
            else:
                source_ip.set('address', rule.source.ip_address)
                if rule.source.ip_prefix_size is not None:
                    source_ip.set('prefixSize',
                                  str(rule.source.ip_prefix_size))
        if rule.source.port_list_id is not None:
            source_port = ET.SubElement(source, 'portListId')
            source_port.text = rule.source.port_list_id
        else:
            if rule.source.port_begin is not None:
                source_port = ET.SubElement(source, 'port')
                source_port.set('begin', rule.source.port_begin)
            if rule.source.port_end is not None:
                source_port.set('end', rule.source.port_end)
        # Setup destination port rule
        dest = ET.SubElement(create_node, "destination")
        if rule.destination.address_list_id is not None:
            dest_ip = ET.SubElement(dest, 'ipAddressListId')
            dest_ip.text = rule.destination.address_list_id
        else:
            dest_ip = ET.SubElement(dest, 'ip')
            if rule.destination.any_ip:
                dest_ip.set('address', 'ANY')
            else:
                dest_ip.set('address', rule.destination.ip_address)
                if rule.destination.ip_prefix_size is not None:
                    dest_ip.set('prefixSize', rule.destination.ip_prefix_size)
        if rule.destination.port_list_id is not None:
            dest_port = ET.SubElement(dest, 'portListId')
            dest_port.text = rule.destination.port_list_id
        else:
            if rule.destination.port_begin is not None:
                dest_port = ET.SubElement(dest, 'port')
                dest_port.set('begin', rule.destination.port_begin)
            if rule.destination.port_end is not None:
                dest_port.set('end', rule.destination.port_end)
        # Set up positioning of rule
        ET.SubElement(create_node, "enabled").text = str(rule.enabled).lower()
        placement = ET.SubElement(create_node, "placement")
        if position_relative_to_rule is not None:
            if position not in positions_with_rule:
                raise ValueError("When position_relative_to_rule is specified"
                                 " position must be %s"
                                 % ', '.join(positions_with_rule))
            if isinstance(position_relative_to_rule,
                          DimensionDataFirewallRule):
                rule_name = position_relative_to_rule.name
            else:
                rule_name = position_relative_to_rule
            placement.set('relativeToRule', rule_name)
        else:
            if position not in positions_without_rule:
                raise ValueError("When position_relative_to_rule is not"
                                 " specified position must be %s"
                                 % ', '.join(positions_without_rule))
        placement.set('position', position)

        response = self.connection.request_with_orgId_api_2(
            'network/createFirewallRule',
            method='POST',
            data=ET.tostring(create_node)).object

        rule_id = None
        for info in findall(response, 'info', TYPES_URN):
            if info.get('name') == 'firewallRuleId':
                rule_id = info.get('value')
        rule.id = rule_id
        return rule
Creates a firewall rule
dataset/ETHPy150Open apache/libcloud/libcloud/compute/drivers/dimensiondata.py/DimensionDataNodeDriver.ex_create_firewall_rule