4    ;;; Allow PPTP
      chain=input action=accept connection-state=new protocol=tcp dst-port=1723 log=no log-prefix=""