[ssh-iptables]

enabled  = true
filter   = sshd
action   = iptables[name=SSH, port=ssh, protocol=tcp]
logpath  = /var/log/secure
maxretry = 3

{% for port in pillar['ports'] %}
[custom-iptables-{{ port }}]

enabled  = true
filter   = sshd
action   = iptables[name=CUSTOM-{{ port }}, port={{ port}}, protocol=tcp]
logpath  = /var/log/secure
maxretry = 3
{% endfor %}