[OPTIONS] enable: 1 [RULES] IN ACCEPT -source 192.168.2.1 -p tcp -dport 22 IN ACCEPT -source 192.168.2.1 -p tcp -dport 80 IN ACCEPT -source 127.0.0.1 -p tcp -dport 80 IN ACCEPT -i net0 -source 192.168.5.0/24 -p tcp -dport 22 GROUP group2 -i net0