public (default, active)
  interfaces: p2p1, p7p1
  sources:
  services: dhcpv6-client mdns ssh
  ports: 22/tcp
  masquerade: no
  forward-ports:
  icmp-blocks:
  rich rules