Not enough duplication - I thought about it, but it felt like more hassle to have to worry about specifying which port rule was which than to have some very braindead dupe code.