1 block in on eri0 all head 1 2 pass in on eri0 proto icmp all group 1 3 pass out on ed0 all head 1000000 4 block out on ed0 proto udp all group 1000000 5 block in on vm0 proto tcp/udp all head 101 6 pass in from 1.1.1.1 to 2.2.2.2 group 101 7 pass in proto tcp from 1.0.0.1 to 2.0.0.2 group 101 8 pass in proto udp from 2.0.0.2 to 3.0.0.3 group 101 9 block in on vm0 proto tcp/udp all head vm0-group 10 pass in from 1.1.1.1 to 2.2.2.2 group vm0-group 11 block in on vm0 proto tcp/udp all head vm0-group 12 pass in from 1.1.1.1 to 2.2.2.2 group vm0-group 13 pass in from 8f:: to f8:: 14 block in inet6 proto udp 15 block in inet6 16