Interface: ET0 (id: 6)   used as: outside
Incoming super
saddr == 192.168.70.1/24 || saddr == 192.168.60.1/24 || saddr == 192.168.50.1/24 || saddr == 192.168.30.1/24 || saddr == 192.168.0.1/24 deny
(daddr == 195.67.1.152/32) accept
proto == udp && daddr == 224.0.0.0/4 accept
proto == igmp accept
Incoming user
sport == domain'53' && proto == udp && (saddr == 195.67.199.18 || saddr == 195.67.199.19) accept
(dport == sip'5060') && proto == tcp accept
(dport == sip'5060') && proto == udp accept
proto == igmp accept
proto == udp && daddr == 224.0.0.0/4 accept
dport == remote-http'66' && proto == tcp && daddr == 195.67.1.152 modify static dport http'80'
Incoming other (not IP)
ethertype == arp'0x806' accept
Outgoing super
(saddr == 195.67.1.152/32) accept
proto == igmp accept
Outgoing user
proto == igmp accept
(saddr != 195.67.1.152/32) modify dynamic source 0
proto == udp && dport == domain'53' && (daddr != 195.67.199.18 && daddr != 195.67.199.19) modify dynamic source 0
proto == udp && dport == ntp'123' inspect
(saddr == 195.67.1.152/32) accept
Logging
# log outside (default: accept)
proto == udp && daddr == 224.0.0.0/4 deny

Interface: AIR3 (id: 5)   used as: blocked
Incoming super
# deny all (closed)
Incoming user
# deny all (closed)
Incoming other (not IP)
# deny all (closed)
Outgoing super
# deny all (closed)
Outgoing user
# deny all (closed)
Logging
# deny all (closed)
proto != noproto deny

Interface: AIR2 (id: 4)   used as: blocked
Incoming super
# deny all (closed)
Incoming user
# deny all (closed)
Incoming other (not IP)
# deny all (closed)
Outgoing super
# deny all (closed)
Outgoing user
# deny all (closed)
Logging
# deny all (closed)
proto != noproto deny

Interface: AIR (id: 3)   used as: inside
Incoming super
saddr == 192.168.50.1/24 accept
proto == udp && dport == dhcps'67' accept
Incoming user
(dport == sip'5060') && (daddr != 192.168.50.1/24) && (proto == tcp || proto == udp) && (daddr != 224.0.0.0/4) modify static daddr 192.168.50.1, static dport sip'5060'
(dport == ftp'21') && daddr != 192.168.50.1 && proto == tcp modify static daddr 192.168.50.1, static dport ftp-proxy'8021'
(dport == 554) && daddr != 192.168.50.1 && proto == tcp modify static daddr 192.168.50.1, static dport 554
dport == snmp'161' && proto == udp && ((daddr == 195.67.1.152) || (daddr == 192.168.70.1) || (daddr == 192.168.60.1) || (daddr == 192.168.50.1) || (daddr == 192.168.30.1) || (daddr == 192.168.0.1)) deny
proto != noproto accept
proto == icmp && icmptype == echo-reply'0' && icmpcode == 0 accept
Incoming other (not IP)
ethertype == arp'0x806' accept
Outgoing super
proto == igmp deny
daddr == 224.0.0.0/4 deny
proto != noproto accept
Outgoing user
proto != noproto accept
Logging
# log inside (default: accept)
proto == udp && daddr == 224.0.0.0/4 deny
(sport == http'80' || dport == http'80') && (saddr == 192.168.50.1 || daddr == 192.168.50.1) && proto == tcp deny
(dport >= netbios-ns'137' && dport <= netbios-ssn'139') deny

Interface: ET4 (id: 2)   used as: inside
Incoming super
saddr == 192.168.30.1/24 accept
proto == igmp accept
proto == udp && dport == dhcps'67' accept
Incoming user
(dport == sip'5060') && (daddr != 192.168.30.1/24) && (proto == tcp || proto == udp) && (daddr != 224.0.0.0/4) modify static daddr 192.168.30.1, static dport sip'5060'
(dport == ftp'21') && daddr != 192.168.30.1 && proto == tcp modify static daddr 192.168.30.1, static dport ftp-proxy'8021'
(dport == 554) && daddr != 192.168.30.1 && proto == tcp modify static daddr 192.168.30.1, static dport 554
dport == snmp'161' && proto == udp && ((daddr == 195.67.1.152) || (daddr == 192.168.70.1) || (daddr == 192.168.60.1) || (daddr == 192.168.50.1) || (daddr == 192.168.30.1) || (daddr == 192.168.0.1)) deny
proto != noproto accept
proto == icmp && icmptype == echo-reply'0' && icmpcode == 0 accept
Incoming other (not IP)
ethertype == arp'0x806' accept
Outgoing super
proto != noproto accept
Outgoing user
proto != noproto accept
Logging
# log inside (default: accept)
proto == udp && daddr == 224.0.0.0/4 deny
(sport == http'80' || dport == http'80') && (saddr == 192.168.30.1 || daddr == 192.168.30.1) && proto == tcp deny
(dport >= netbios-ns'137' && dport <= netbios-ssn'139') deny

Interface: ET1 (id: 1)   used as: inside
Incoming super
saddr == 192.168.0.1/24 accept
proto == igmp accept
proto == udp && dport == dhcps'67' accept
Incoming user
(dport == sip'5060') && (daddr != 192.168.0.1/24) && (proto == tcp || proto == udp) && (daddr != 224.0.0.0/4) modify static daddr 192.168.0.1, static dport sip'5060'
(dport == ftp'21') && daddr != 192.168.0.1 && proto == tcp modify static daddr 192.168.0.1, static dport ftp-proxy'8021'
(dport == 554) && daddr != 192.168.0.1 && proto == tcp modify static daddr 192.168.0.1, static dport 554
dport == snmp'161' && proto == udp && ((daddr == 195.67.1.152) || (daddr == 192.168.70.1) || (daddr == 192.168.60.1) || (daddr == 192.168.50.1) || (daddr == 192.168.30.1) || (daddr == 192.168.0.1)) deny
proto != noproto accept
proto == icmp && icmptype == echo-reply'0' && icmpcode == 0 accept
Incoming other (not IP)
ethertype == arp'0x806' accept
Outgoing super
proto != noproto accept
Outgoing user
proto != noproto accept
Logging
# log inside (default: accept)
proto == udp && daddr == 224.0.0.0/4 deny
(sport == http'80' || dport == http'80') && (saddr == 192.168.0.1 || daddr == 192.168.0.1) && proto == tcp deny
(dport >= netbios-ns'137' && dport <= netbios-ssn'139') deny