pass in from port = 10101 pass out from any to port != 22 block in from port 20:21 block out from any to port 10 <> 100 pass out from any to port = {3,5,7,9} block in from port = {20,25} pass in from any port = {11:12, 21:22} to any port = {1:2, 4:5, 8:9}