pass in quick proto tcp from 192.168.0.0/16 to 192.168.1.101 port = 22 flags S keep state