00010 allow ip from any to any layer2 mac-type 0x0806
00100 allow ip from any to any via lo0
00105 deny ip from any to 127.0.0.0/8
00110 deny ip from 127.0.0.0/8 to any
01000 allow tcp from any to any established
01005 allow ip from any to any frag
01020 allow tcp from any to any dst-port 20
01030 allow tcp from any to any dst-port 20 layer2 setup
01035 allow tcp from any to any dst-port 21
01038 allow tcp from any to any dst-port 21 layer2 setup
01040 allow tcp from any to any dst-port 22
01050 allow tcp from any to any dst-port 22 layer2 setup
01100 allow tcp from any to any dst-port 25
01110 allow tcp from any to any dst-port 25 layer2 setup
01140 allow tcp from any to 202.188.0.133 dst-port 53 setup
01140 allow tcp from any to 202.188.0.133 dst-port 53 layer2 setup
01141 allow tcp from any to 202.188.1.5 dst-port 53 setup
01141 allow tcp from any to 202.188.1.5 dst-port 53 layer2 setup
01142 allow udp from any to 202.188.0.133 dst-port 53 layer2
01142 allow udp from any to 202.188.0.133 dst-port 53
01143 allow udp from any to 202.188.1.5 dst-port 53 layer2
01143 allow udp from any to 202.188.1.5 dst-port 53
01144 allow udp from 202.188.0.133 53 to any layer2
01144 allow udp from 202.188.0.133 53 to any
01145 allow udp from 202.188.1.5 53 to any layer2
01145 allow udp from 202.188.1.5 53 to any
01160 allow tcp from any to any dst-port 80
01170 allow tcp from any to any dst-port 80 layer2 setup
01180 allow tcp from any to any dst-port 110
01190 allow tcp from any to any dst-port 110 layer2 setup
01200 allow tcp from any to any dst-port 143
01210 allow tcp from any to any dst-port 143 layer2 setup
01220 allow tcp from any to any dst-port 443
01230 allow tcp from any to any dst-port 443 layer2 setup
01240 allow tcp from any to any dst-port 8443
01250 allow tcp from any to any dst-port 8443 layer2 setup
09500 allow icmp from any to any
09500 allow icmp from any to any layer2
10000 allow ip from me to any
65000 deny log logamount 100 ip from any to any
65535 deny ip from any to any
#