1 block in on eri0 all head 1
2 pass in on eri0 proto icmp all group 1
3 pass out on ed0 all head 1000000
4 block out on ed0 proto udp all group 1000000
5 block in on vm0 proto tcp/udp all head 101
6 pass in from 1.1.1.1 to 2.2.2.2 group 101
7 pass in proto tcp from 1.0.0.1 to 2.0.0.2 group 101
8 pass in proto udp from 2.0.0.2 to 3.0.0.3 group 101
9 block in on vm0 proto tcp/udp all head vm0-group
10 pass in from 1.1.1.1 to 2.2.2.2 group vm0-group
11 block in on vm0 proto tcp/udp all head vm0-group
12 pass in from 1.1.1.1 to 2.2.2.2 group vm0-group
13 pass in from 8f:: to f8::
14 block in inet6 proto udp