+RULE="Accept service ping from any to any options comment=\"ping\""
RULE="Accept service any from firewall to world.inet options comment=\"Outgoing host traffic\""
RULE="Accept service any from vservers.internal to world.inet options comment=\"Outgoing vserver traffic\""
RULE="Snat service any from vservers.internal to world.inet options comment=\"snat for vservers\""