HQ (active)
  target: default
  icmp-block-inversion: no
  interfaces:
  sources: 195.x.xxx.xxx 90.xxx.xx.xxx 95.xx.xx.xx
  services: ssh mysql telnet
  ports:
  protocols:
  masquerade: no
  forward-ports:
  source-ports:
  icmp-blocks:
  rich rules:
    rule family="ipv4" source address="195.x.xxx.xxx" service name="ssh" log prefix="SSH Access HQ" level="notice" accept
    rule family="ipv4" source address="90.xxx.xx.xxx" service name="ssh" log prefix="SSH Access HQ" level="notice" accept
    rule family="ipv4" source address="195.x.xxx.xxx" service name="ssh" log prefix="SSH Access xxxx" level="notice" accept

block
  target: %%REJECT%%
  icmp-block-inversion: no
  interfaces:
  sources:
  services:
  ports:
  protocols:
  masquerade: no
  forward-ports:
  source-ports:
  icmp-blocks:
  rich rules:


dmz
  target: default
  icmp-block-inversion: no
  interfaces:
  sources:
  services: ssh
  ports:
  protocols:
  masquerade: no
  forward-ports:
  source-ports:
  icmp-blocks:
  rich rules:


drop
  target: DROP
  icmp-block-inversion: no
  interfaces:
  sources:
  services:
  ports:
  protocols:
  masquerade: no
  forward-ports:
  source-ports:
  icmp-blocks:
  rich rules:


external
  target: default
  icmp-block-inversion: no
  interfaces:
  sources:
  services: ssh
  ports:
  protocols:
  masquerade: yes
  forward-ports:
  source-ports:
  icmp-blocks:
  rich rules:


home
  target: default
  icmp-block-inversion: no
  interfaces:
  sources:
  services: ssh mdns samba-client dhcpv6-client
  ports:
  protocols:
  masquerade: no
  forward-ports:
  source-ports:
  icmp-blocks:
  rich rules:


internal
  target: default
  icmp-block-inversion: no
  interfaces:
  sources:
  services: ssh mdns samba-client dhcpv6-client
  ports:
  protocols:
  masquerade: no
  forward-ports:
  source-ports:
  icmp-blocks:
  rich rules:


public
  target: default
  icmp-block-inversion: no
  interfaces:
  sources:
  services: https http
  ports:
  protocols:
  masquerade: no
  forward-ports:
  source-ports:
  icmp-blocks:
  rich rules:


homeusers (active)
  target: default
  icmp-block-inversion: no
  interfaces:
  sources: 92.xxx.xxx.xxx 31.xxx.xxx.xxx 82.xx.xxx.xxx
  services: ssh mysql telnet
  ports:
  protocols:
  masquerade: no
  forward-ports:
  source-ports:
  icmp-blocks:
  rich rules:
    rule family="ipv4" source address="95.xx.xx.xx" service name="ssh" log prefix="SSH Access HQ" level="notice" accept
    rule family="ipv4" source address="92.xxx.xxx.xxx" service name="ssh" log prefix="SSH Access xxxxxxx" level="notice" accept
    rule family="ipv4" source address="31.xxx.xxx.xxx" service name="ssh" log prefix="SSH Access xwxwxw" level="notice" accept

trusted (active)
  target: default
  icmp-block-inversion: no
  interfaces:
  sources: 127.0.0.1 19x.xxx.xxx.xxx
  services: mysql
  ports:
  protocols:
  masquerade: no
  forward-ports:
  source-ports:
  icmp-blocks:
  rich rules:


work
  target: default
  icmp-block-inversion: no
  interfaces:
  sources:
  services: ssh dhcpv6-client
  ports:
  protocols:
  masquerade: no
  forward-ports:
  source-ports:
  icmp-blocks:
  rich rules: