1anchor foo 2anchor bar all 3anchor bar from any to any 4anchor foo inet 5anchor foo inet6 6anchor foo inet all 7anchor foo proto tcp 8anchor foo inet proto tcp from 10.1.2.3 port smtp to 10.2.3.4 port ssh 9anchor foobar inet6 proto udp from ::1 port 1 to ::1 port 2 10anchor filteropt out proto tcp to any port 22 user root 11anchor filteropt in proto tcp to (self) port 22 group sshd 12anchor filteropt out inet proto icmp all icmp-type echoreq 13