Defines
blacklist( $proto => '-', $port => '-' )
host( $options => 'tcpflags,blacklist,norfc1918', $zone )
interface( $options => 'tcpflags,blacklist,norfc1918,routefilter,nosmurfs,logmartians', $broadcast => 'detect', $zone )
masq( $proto => '-', $interface, $port => '-', $mark => '', $address, $ipsec => '-' )
nat( $local => 'yes', $internal, $all => 'no', $interface )
policy( $policy, $sourcezone, $order, $limitburst => '-', $destinationzone, $shloglevel => '-' )
proxyarp( $interface, $external, $persistent => 'no', $haveroute => 'yes' )
rfc1918( $action => 'logdrop' )
routestopped( $options => '', $host => '-' )
rule( $user => '-', $proto => '-', $order, $destination, $action, $mark => '', $sourceport => '-', $originaldest => '-', $destinationport => '-', $ratelimit => '-', $source )
zone( $options => '-', $order => '100', $out => '-', $type, $in => '-', $parent => '-' )