"GUEST_IN": {
                                "default-action": "accept",
                                "description": "packets from guest network",
                                "rule": {
                                        "88": {
                                                "action": "accept",
                                                "description": "allow open dns ns1",
                                                "destination": {
                                                        "address": "208.67.222.222"
                                                },
                                                "log": "disable",
                                                "protocol": "tcp_udp"
                                        },
                                        "89": {
                                                "action": "accept",
                                                "description": "allow open dns ns2",
                                                "destination": {
                                                        "address": "208.67.222.220"
                                                },
                                                "log": "disable",
                                                "protocol": "tcp_udp"
                                        },
                                        "90": {
                                                "action": "drop",
                                                "description": "Block all other DNS",
                                                "destination": {
                                                        "port": "53"
                                                },
                                                "log": "disable",
                                                "protocol": "tcp_udp"
                                        }
                                }
                        }