Hello, @dvops

I don’t think that this is currently possible with the API.

You can check the docs for removing inbound rules via API:

https://developers.digitalocean.com/documentation/v2/#remove-rules-from-a-firewall

However as you already mentioned you need to specify the sources when doing the call:

Request Body:

{
  "inbound_rules": [
    {
      "protocol": "tcp",
      "ports": "3306",
      "sources": {
        "droplet_ids": [
          49696269
        ]
      }
    }
  ],
  "outbound_rules": [
    {
      "protocol": "tcp",
      "ports": "3306",
      "destinations": {
        "droplet_ids": [
          49696269
        ]
      }
    }
  ]
}

The best thing to do to get your voice heard regarding this would be to head over to our Product Ideas board and post a new idea, including as much information as possible for what you’d like to see implemented.

https://ideas.digitalocean.com/

Hope that helps!

Alex