How do I keep some of the existing firewall rules (which is dependent on host) in the remote file, and change the others?
You could either copy them to the top of your template, or you could take a look at the blockinfile module
ansible.builtin.blockinfile module – Insert/update/remove a text block surrounded by marker lines — Ansible Community Documentation

Thanks a lot! I will go with the blockinfile, sounds promising.