action :remove do
  e = execute "remove source #{new_resource.source} from zone" do
    only_if "firewall-cmd --permanent #{zone} --query-source=#{new_resource.source}"
    command(<<-EOC)
      firewall-cmd #{zone} --remove-source=#{new_resource.source}