pass in from port = 10101 pass out from any to port != 22 block in from port 20:21 block out from any to port 10 <> 100 pass out from any to port = (3,5,7,9) block in from port = (20,25) pass in from any port = (11:12, 21:22) to any port = (1:2, 4:5, 8:9)