RULE="Accept service ping from any to any options comment=\"ping\"" RULE="Accept service any from firewall to world.inet options comment=\"Outgoing host traffic\"" RULE="Accept service any from any to world.inet options comment=\"Outgoing vserver traffic (but from any due to vuurmuur limits)\"" RULE="Snat service any from vservers.internal to world.inet options out_int=\"inet-nic\",comment=\"snat for vservers\"" RULE="separator" RULE="Accept service any from zeratul.direct to firewall options comment=\"direct traffic from zeratul\"" RULE="Accept service any from firewall to zeratul.direct options comment=\"direct traffice to zeratul\"" RULE="separator" RULE="Accept service ssh-host from any to firewall(any) options comment=\"ssh access to the host\"" RULE="Dnat service http from world.inet to www.vservers.internal options in_int=\"inet-nic\",comment=\"http to www\"" RULE="Accept service http from world.inet to firewall options in_int=\"vserver-www-nic\"" RULE="Dnat service smtp from world.inet to mail.vservers.internal options comment=\"smtp to mail\"" RULE="Accept service smtp from world.inet to firewall options in_int=\"vserver-mail-nic\"" RULE="Dnat service dns from world.inet to dns.vservers.internal options in_int=\"inet-nic\",remoteport=\"54\",comment=\"dns to dns (running on port 54)\"" RULE="Accept service dns-internal from world.inet to firewall options in_int=\"vserver-dns-nic\"" RULE="Dnat service imaps from world.inet to mail.vservers.internal options in_int=\"inet-nic\",comment=\"imaps to mail\"" RULE="Accept service imaps from world.inet to firewall options in_int=\"vserver-mail-nic\"" RULE="Dnat service ssh from world.inet to login.vservers.internal options in_int=\"inet-nic\",comment=\"ssh to login\"" RULE="Accept service ssh from world.inet to firewall options in_int=\"vserver-login-nic\"" RULE="Dnat service locus from world.inet to login.vservers.internal options in_int=\"inet-nic\",comment=\"Locus GPS tracker to login\"" RULE="Accept service locus from world.inet to firewall options in_int=\"vserver-login-nic\"" RULE="Dnat service telnet from world.inet to www.vservers.internal options in_int=\"inet-nic\",remoteport=\"2323\",comment=\"Hunternet gameserver\"" RULE="Accept service telnet-nonpriv from world.inet to firewall options in_int=\"vserver-www-nic\",comment=\"Hunternet gameserver\"" RULE="Drop service dhcp from any to any options comment=\"Drop all DHCP without logging\""