00100 allow ip from any to any via lo0
00200 deny ip from any to 127.0.0.0/8
00300 deny ip from 127.0.0.0/8 to any
00400 deny tcp from any to any frag
00500 check-state
00600 allow tcp from any to any established
00700 allow ip from any to any out keep-state
00800 allow icmp from any to any icmptypes 0,3,8,11,23,30
00900 allow tcp from any to any dst-port 20-21 setup keep-state
01000 allow tcp from any to any dst-port 22 setup keep-state
01100 allow tcp from any to any dst-port 25 setup keep-state
01200 allow tcp from any to any dst-port 53 setup keep-state
01300 allow udp from any to any dst-port 53 keep-state
01400 allow tcp from any to any dst-port 80 setup keep-state
01500 allow tcp from any to any dst-port 110 setup keep-state
01600 allow udp from any to any dst-port 161 keep-state
01700 allow tcp from any to any dst-port 22132-22524 setup keep-state
01800 allow tcp from any to any dst-port 10004 setup keep-state
01900 allow tcp from any to any dst-port 6000 setup keep-state
65535 deny ip from any to any