Can't specify services only with protocols

[bogdanr]

This config doesn't work:

firewall:
  services:
    ssh:
      protos:
        - udp
        - tcp

[o-be-one]

Hello, long time you had no answer ...
I 've found a way: i've added this:

  ips_allow:
    - 0.0.0.0/0

[scub]

potentially resolved by #27 which would, depending on who you are, fulfill what would be a more idealized workflow. Explicitly specifying 0.0.0.0/0 for global matches doesn't make the most sense when the rule never actually propagates until an ips_allow blob is specified. Why not just make it the default when no options are specified? Is there a reason we would want a rule defined that can never actively be used?