filter-primitive NET_DST
  type ip-address-prefix
  deny 146.110.0.0/16
  default permit

filter-primitive tarkaize
  type ip-address
  permit 146.110.60.199
  default deny

filter-definition tarkafel
  match ip-source-address tarkaize
  match ip-destination-address NET_DST