[
  {
    "action": "passthrough",
    "chain": "forward",
    "comment": "special"
  },
  {
    "action": "fasttrack-connection",
    "chain": "forward",
    "comment": "defconf:",
    "connection-state": "established,related",
    "hw-offload": "yes",
    "log": "no",
    "log-prefix": ""
  },
  {
    "action": "accept",
    "chain": "forward",
    "comment": "defconf:",
    "connection-state": "established,related",
    "log": "no",
    "log-prefix": ""
  },
  {
    "action": "drop",
    "chain": "forward",
    "comment": "defconf:",
    "connection-state": "invalid",
    "log": "no",
    "log-prefix": ""
  },
  {
    "action": "accept",
    "chain": "forward",
    "comment": "Allow",
    "connection-nat-state": "dstnat"
  },
  {
    "action": "accept",
    "chain": "forward",
    "comment": "allow",
    "connection-state": "new",
    "dst-address": "192.168.88.25",
    "dst-port": "6667",
    "log": "no",
    "log-prefix": "",
    "protocol": "tcp"
  },
  {
    "action": "drop",
    "chain": "forward",
    "comment": "defconf:",
    "connection-nat-state": "!dstnat",
    "connection-state": "new",
    "in-interface-list": "WAN",
    "log": "no",
    "log-prefix": ""
  },
  {
    "action": "accept",
    "chain": "input",
    "log": "no",
    "log-prefix": "",
    "protocol": "icmp"
  },
  {
    "action": "accept",
    "chain": "input",
    "connection-state": "established",
    "log": "no",
    "log-prefix": ""
  },
  {
    "action": "accept",
    "chain": "input",
    "comment": "allow",
    "dst-port": "500",
    "protocol": "udp"
  },
  {
    "action": "drop",
    "chain": "input",
    "comment": "Block",
    "dst-port": "80,443",
    "in-interface-list": "WAN",
    "protocol": "tcp"
  },
  {
    "action": "accept",
    "chain": "input",
    "comment": "Allow",
    "dst-port": "80,443",
    "in-interface-list": "LAN",
    "protocol": "tcp",
    "src-address": "192.168.88.0/24"
  },
  {
    "action": "accept",
    "chain": "input",
    "comment": "ids",
    "src-address-list": "Openfactory"
  },
  {
    "action": "accept",
    "chain": "input",
    "comment": "ids",
    "src-address-list": "Cloudflare"
  },
  {
    "action": "accept",
    "chain": "input",
    "comment": "ids",
    "src-address-list": "PaloAlto"
  },
  {
    "action": "drop",
    "chain": "input",
    "comment": "ids",
    "src-address-list": "Blocked"
  },
  {
    "action": "drop",
    "chain": "forward",
    "comment": "ids",
    "src-address-list": "Blocked"
  },
  {
    "action": "drop",
    "chain": "input",
    "comment": "drop",
    "in-interface": "pppoe-out1",
    "log": "no",
    "log-prefix": ""
  }
]