1block in on eri0 all head 1 2pass in on eri0 proto icmp all group 1 3pass out on ed0 all head 1000000 4block out on ed0 proto udp all group 1000000 5block in on vm0 proto tcp/udp all head 101 6pass in from 1.1.1.1 to 2.2.2.2 group 101 7pass in proto tcp from 1.0.0.1 to 2.0.0.2 group 101 8pass in proto udp from 2.0.0.2 to 3.0.0.3 group 101 9block in on vm0 proto tcp/udp all head vm0-group 10pass in from 1.1.1.1 to 2.2.2.2 group vm0-group 11block in on vm0 proto tcp/udp all head vm0-group 12pass in from 1.1.1.1 to 2.2.2.2 group vm0-group 13pass in from 8f:: to f8:: 14block in inet6 proto udp 15block in inet6 16