Also please note you can have a relation with s type that uses different caveat definitions, so it would allow you to have one definition for ip port ranges, and one caveat definition for "a single port"