+
+# management ipset
+{ from => 'outside', to => 'host', source => '192.168.128.1', dport => 8006, action => 'DROP' }
+{ from => 'outside', to => 'host', source => '192.168.128.1', dport => 22, action => 'DROP' }
+{ from => 'outside', to => 'host', source => '192.168.128.2', dport => 8006, action => 'ACCEPT' }
+{ from => 'outside', to => 'host', source => '192.168.128.2', dport => 22, action => 'ACCEPT' }
+