# pass

resource "google_compute_firewall" "restricted" {
  name    = "example"
  network = "google_compute_network.vpc.name"

  allow {
    protocol = "tcp"
    ports    = ["21"]
  }

  source_ranges = ["172.1.2.3/32"]
  target_tags   = ["ftp"]
}