[OPTIONS]

enable: 1

[GROUP group1]

IN ACCEPT 192.168.2.0/24 - tcp 22 
IN REJECT 192.168.2.0/24 - tcp 80 
OUT REJECT 192.168.2.0/24 - tcp 80 
OUT REJECT - - tcp 443 

[GROUP group2]

IN ACCEPT 192.168.3.0/24 - tcp 22