00001 check-state
00100 deny ip from 213.78.0.0/16 to any
00020 allow all from any to any
65535 deny ip from any to any