[options] enable: 1 [rules] IN ACCEPT -p tcp -dport 80