1 2 3 4 5 6 7 8
allow ssh # secure https ingress allow in on eth0 from internal to external port 443 proto tcp # dns egress restrictions deny out to 8.8.8.8 port 53 proto udp