**SUMMARY
**
I think the module vyos_firewall_rules should delete rules when using replaced.
This bug only affects the source and destination.
**STEPS TO REPRODUCE**
```
yaml
vyos.vyos.vyos_firewall_rules:
config:
- afi: ipv4
rule_sets:
- name: test4
description: IPv4 INBOUND rule set
default_action: accept
rules:
- number: 101
action: reject
source:
group:
network_group: "{{ public_group_ipv4['public']['name'] }}"
state: replaced
```
**EXPECTED RESULTS**
```
vyos@nf-pont-client1a# show firewall name test4
default-action accept
description "IPv4 INBOUND rule set"
rule 101 {
action reject
source {
group {
network-group public_group_ipv4
}
}
}
```
**ACTUAL RESULTS**
```
vyos@nf-pont-client1a# show firewall name test4
default-action accept
description "IPv4 INBOUND rule set"
rule 101 {
action reject
destination {
group {
network-group public_group_ipv4
}
}
source {
group {
network-group public_group_ipv4
}
}
}
```