1 pass in from 127.0.0.1/32 to 127.0.0.1/32 with opt sec 2 pass in from 127.0.0.1/32 to 127.0.0.1/32 with opt lsrr not opt sec 3 block in from any to any with not opt sec-class topsecret 4 block in from any to any with not opt sec-class topsecret,secret 5 pass in from any to any with opt sec-class topsecret,confid not opt sec-class unclass 6