[
  {
    "action": "accept",
    "chain": "input",
    "comment": "defconf:",
    "connection-state": "established,related,untracked"
  },
  {
    "action": "drop",
    "chain": "input",
    "comment": "defconf:",
    "connection-state": "invalid"
  },
  {
    "action": "accept",
    "chain": "input",
    "comment": "defconf:",
    "protocol": "icmpv6"
  },
  {
    "action": "accept",
    "chain": "input",
    "comment": "defconf:",
    "port": "33434-33534",
    "protocol": "udp"
  },
  {
    "action": "accept",
    "chain": "input",
    "comment": "defconf:",
    "dst-port": "546",
    "protocol": "udp",
    "src-address": "fe80::/10"
  },
  {
    "action": "accept",
    "chain": "input",
    "comment": "defconf:",
    "dst-port": "500,4500",
    "protocol": "udp"
  },
  {
    "action": "accept",
    "chain": "input",
    "comment": "defconf:",
    "protocol": "ipsec-ah"
  },
  {
    "action": "accept",
    "chain": "input",
    "comment": "defconf:",
    "protocol": "ipsec-esp"
  },
  {
    "action": "accept",
    "chain": "input",
    "comment": "defconf:",
    "ipsec-policy": "in,ipsec"
  },
  {
    "action": "drop",
    "chain": "input",
    "comment": "defconf:",
    "in-interface-list": "!LAN"
  },
  {
    "action": "accept",
    "chain": "forward",
    "comment": "defconf:",
    "connection-state": "established,related,untracked"
  },
  {
    "action": "drop",
    "chain": "forward",
    "comment": "defconf:",
    "connection-state": "invalid"
  },
  {
    "action": "drop",
    "chain": "forward",
    "comment": "defconf:",
    "src-address-list": "bad_ipv6"
  },
  {
    "action": "drop",
    "chain": "forward",
    "comment": "defconf:",
    "dst-address-list": "bad_ipv6"
  },
  {
    "action": "drop",
    "chain": "forward",
    "comment": "defconf:",
    "hop-limit": "equal:1",
    "protocol": "icmpv6"
  },
  {
    "action": "accept",
    "chain": "forward",
    "comment": "defconf:",
    "protocol": "icmpv6"
  },
  {
    "action": "accept",
    "chain": "forward",
    "comment": "defconf:",
    "protocol": "139"
  },
  {
    "action": "accept",
    "chain": "forward",
    "comment": "defconf:",
    "dst-port": "500,4500",
    "protocol": "udp"
  },
  {
    "action": "accept",
    "chain": "forward",
    "comment": "defconf:",
    "protocol": "ipsec-ah"
  },
  {
    "action": "accept",
    "chain": "forward",
    "comment": "defconf:",
    "protocol": "ipsec-esp"
  },
  {
    "action": "accept",
    "chain": "forward",
    "comment": "defconf:",
    "ipsec-policy": "in,ipsec"
  },
  {
    "action": "drop",
    "chain": "forward",
    "comment": "defconf:",
    "in-interface-list": "!LAN"
  },
  {
    "action": "accept",
    "chain": "forward",
    "comment": "Allow",
    "protocol": "icmpv6"
  },
  {
    "action": "accept",
    "chain": "input",
    "comment": "Allow",
    "protocol": "icmpv6"
  },
  {
    "action": "accept",
    "chain": "input",
    "comment": "ids",
    "src-address-list": "Openfactory"
  },
  {
    "action": "accept",
    "chain": "input",
    "comment": "ids",
    "src-address-list": "Cloudflare"
  },
  {
    "action": "accept",
    "chain": "input",
    "comment": "ids",
    "src-address-list": "PaloAlto"
  },
  {
    "action": "drop",
    "chain": "input",
    "comment": "ids",
    "src-address-list": "Blocked"
  },
  {
    "action": "drop",
    "chain": "forward",
    "comment": "ids",
    "src-address-list": "Blocked"
  }
]