1 <filter name='nwfilter-~NAME~' chain='root'>
3 <rule action='reject' direction='in' priority='100'>
4 <ip srcipaddr='10.0.~IP~.0' srcipmask='255.255.255.0'/>
6 <rule action='reject' direction='out' priority='100'>
7 <ip dstipaddr='10.0.~IP~.0' srcipmask='255.255.255.0'/>