version 5 interface eth0 lan policy reject protection full server ping accept server ssh accept server http accept server cups accept server ident accept server samba accept server custom netcat tcp/11235 default accept server custom bittorrent tcp/6881:6999 default accept client all accept