1*4d7709ddSKristof Provostanchor foo 2*4d7709ddSKristof Provostanchor bar all 3*4d7709ddSKristof Provostanchor bar from any to any 4*4d7709ddSKristof Provostanchor foo inet 5*4d7709ddSKristof Provostanchor foo inet6 6*4d7709ddSKristof Provostanchor foo inet all 7*4d7709ddSKristof Provostanchor foo proto tcp 8*4d7709ddSKristof Provostanchor foo inet proto tcp from 10.1.2.3 port smtp to 10.2.3.4 port ssh 9*4d7709ddSKristof Provostanchor foobar inet6 proto udp from ::1 port 1 to ::1 port 2 10*4d7709ddSKristof Provostanchor filteropt out proto tcp to any port 22 user root 11*4d7709ddSKristof Provostanchor filteropt in proto tcp to (self) port 22 group sshd 12*4d7709ddSKristof Provostanchor filteropt out inet proto icmp all icmp-type echoreq 13