00070 allow tcp from any to any dst-port 22 keep-state 00080 allow tcp from any to any dst-port 22 layer2 keep-state 00080 allow tcp from any to any dst-port 22 layer2 keep-state 00200 allow icmp from any to any layer2 00201 allow icmp from any to any 00202 allow icmp from any to any via fxp1 00203 allow icmp from any to any via fxp1 layer2 01000 allow ip from any to any MAC any any 65000 deny log logamount 100 ip from any to any 65535 deny ip from any to any