---
parsed_sample:
  - action: "accept"
    chain: "input"
    comment: "defconf: accept established,related,untracked"
    connection_nat_state: ""
    connection_state: "established,related,untracked"
    dst_address: ""
    dst_address_list: ""
    dst_port: ""
    flags: ""
    hw_offload: ""
    in_interface: ""
    in_interface_list: ""
    index: "0"
    ipsec_policy: ""
    log: ""
    log_prefix: ""
    out_interface: ""
    out_interface_list: ""
    protocol: ""
    src_address: ""
    src_address_list: ""
    src_mac_address: ""
    src_port: ""
  - action: "drop"
    chain: "input"
    comment: "defconf: drop invalid"
    connection_nat_state: ""
    connection_state: "invalid"
    dst_address: ""
    dst_address_list: ""
    dst_port: ""
    flags: ""
    hw_offload: ""
    in_interface: ""
    in_interface_list: ""
    index: "1"
    ipsec_policy: ""
    log: ""
    log_prefix: ""
    out_interface: ""
    out_interface_list: ""
    protocol: ""
    src_address: ""
    src_address_list: ""
    src_mac_address: ""
    src_port: ""
  - action: "accept"
    chain: "forward"
    comment: "FIREWALL-DMZ-1"
    connection_nat_state: ""
    connection_state: "established,related,new"
    dst_address: ""
    dst_address_list: ""
    dst_port: ""
    flags: ""
    hw_offload: ""
    in_interface: "dmz-1-vlan"
    in_interface_list: ""
    index: "2"
    ipsec_policy: ""
    log: ""
    log_prefix: ""
    out_interface: "pppoe-out1"
    out_interface_list: ""
    protocol: ""
    src_address: ""
    src_address_list: ""
    src_mac_address: ""
    src_port: ""
  - action: "accept"
    chain: "forward"
    comment: ""
    connection_nat_state: ""
    connection_state: ""
    dst_address: "185.163.212.156/30"
    dst_address_list: ""
    dst_port: ""
    flags: ""
    hw_offload: ""
    in_interface: ""
    in_interface_list: ""
    index: "3"
    ipsec_policy: ""
    log: ""
    log_prefix: ""
    out_interface: ""
    out_interface_list: ""
    protocol: ""
    src_address: ""
    src_address_list: ""
    src_mac_address: ""
    src_port: ""
  - action: "accept"
    chain: "input"
    comment: "defconf: accept ICMP"
    connection_nat_state: ""
    connection_state: ""
    dst_address: ""
    dst_address_list: ""
    dst_port: ""
    flags: ""
    hw_offload: ""
    in_interface: ""
    in_interface_list: ""
    index: "4"
    ipsec_policy: ""
    log: ""
    log_prefix: ""
    out_interface: ""
    out_interface_list: ""
    protocol: "icmp"
    src_address: ""
    src_address_list: ""
    src_mac_address: ""
    src_port: ""
  - action: "accept"
    chain: "input"
    comment: "Acces VPN"
    connection_nat_state: ""
    connection_state: ""
    dst_address: ""
    dst_address_list: ""
    dst_port: "500,1701,4500"
    flags: ""
    hw_offload: ""
    in_interface: ""
    in_interface_list: ""
    index: "5"
    ipsec_policy: ""
    log: ""
    log_prefix: "Acces VPN"
    out_interface: ""
    out_interface_list: ""
    protocol: "udp"
    src_address: ""
    src_address_list: ""
    src_mac_address: ""
    src_port: ""
  - action: "accept"
    chain: "input"
    comment: ""
    connection_nat_state: ""
    connection_state: ""
    dst_address: ""
    dst_address_list: ""
    dst_port: ""
    flags: ""
    hw_offload: ""
    in_interface: ""
    in_interface_list: ""
    index: "6"
    ipsec_policy: ""
    log: ""
    log_prefix: ""
    out_interface: ""
    out_interface_list: ""
    protocol: "ipsec-esp"
    src_address: ""
    src_address_list: ""
    src_mac_address: ""
    src_port: ""
  - action: "accept"
    chain: "input"
    comment: "Acces WAN"
    connection_nat_state: ""
    connection_state: ""
    dst_address: ""
    dst_address_list: ""
    dst_port: "4430,22,8291"
    flags: ""
    hw_offload: ""
    in_interface: ""
    in_interface_list: ""
    index: "7"
    ipsec_policy: ""
    log: ""
    log_prefix: ""
    out_interface: ""
    out_interface_list: ""
    protocol: "tcp"
    src_address: ""
    src_address_list: "Supervision"
    src_mac_address: ""
    src_port: ""
  - action: "accept"
    chain: "input"
    comment: "Acces WAN SNMP"
    connection_nat_state: ""
    connection_state: ""
    dst_address: ""
    dst_address_list: ""
    dst_port: "161"
    flags: ""
    hw_offload: ""
    in_interface: ""
    in_interface_list: ""
    index: "8"
    ipsec_policy: ""
    log: ""
    log_prefix: ""
    out_interface: ""
    out_interface_list: ""
    protocol: "udp"
    src_address: ""
    src_address_list: "Supervision"
    src_mac_address: ""
    src_port: ""
  - action: "accept"
    chain: "input"
    comment: "defconf: accept to local loopback (for CAPsMAN)"
    connection_nat_state: ""
    connection_state: ""
    dst_address: "127.0.0.1"
    dst_address_list: ""
    dst_port: ""
    flags: ""
    hw_offload: ""
    in_interface: ""
    in_interface_list: ""
    index: "9"
    ipsec_policy: ""
    log: ""
    log_prefix: ""
    out_interface: ""
    out_interface_list: ""
    protocol: ""
    src_address: ""
    src_address_list: ""
    src_mac_address: ""
    src_port: ""
  - action: "drop"
    chain: "input"
    comment: "defconf: drop all not coming from LAN"
    connection_nat_state: ""
    connection_state: ""
    dst_address: ""
    dst_address_list: ""
    dst_port: ""
    flags: ""
    hw_offload: ""
    in_interface: ""
    in_interface_list: "!LAN"
    index: "10"
    ipsec_policy: ""
    log: ""
    log_prefix: ""
    out_interface: ""
    out_interface_list: ""
    protocol: ""
    src_address: ""
    src_address_list: ""
    src_mac_address: ""
    src_port: ""
  - action: "accept"
    chain: "forward"
    comment: "defconf: accept in ipsec policy"
    connection_nat_state: ""
    connection_state: ""
    dst_address: ""
    dst_address_list: ""
    dst_port: ""
    flags: ""
    hw_offload: ""
    in_interface: ""
    in_interface_list: ""
    index: "11"
    ipsec_policy: "in,ipsec"
    log: ""
    log_prefix: ""
    out_interface: ""
    out_interface_list: ""
    protocol: ""
    src_address: ""
    src_address_list: ""
    src_mac_address: ""
    src_port: ""
  - action: "accept"
    chain: "forward"
    comment: "defconf: accept out ipsec policy"
    connection_nat_state: ""
    connection_state: ""
    dst_address: ""
    dst_address_list: ""
    dst_port: ""
    flags: ""
    hw_offload: ""
    in_interface: ""
    in_interface_list: ""
    index: "12"
    ipsec_policy: "out,ipsec"
    log: ""
    log_prefix: ""
    out_interface: ""
    out_interface_list: ""
    protocol: ""
    src_address: ""
    src_address_list: ""
    src_mac_address: ""
    src_port: ""
  - action: "fasttrack-connection"
    chain: "forward"
    comment: "defconf: fasttrack"
    connection_nat_state: ""
    connection_state: "established,related"
    dst_address: ""
    dst_address_list: ""
    dst_port: ""
    flags: "X"
    hw_offload: "yes"
    in_interface: ""
    in_interface_list: ""
    index: "13"
    ipsec_policy: ""
    log: ""
    log_prefix: ""
    out_interface: ""
    out_interface_list: ""
    protocol: ""
    src_address: ""
    src_address_list: ""
    src_mac_address: ""
    src_port: ""
  - action: "accept"
    chain: "forward"
    comment: "defconf: accept established,related, untracked"
    connection_nat_state: ""
    connection_state: "established,related,untracked"
    dst_address: ""
    dst_address_list: ""
    dst_port: ""
    flags: ""
    hw_offload: ""
    in_interface: ""
    in_interface_list: ""
    index: "14"
    ipsec_policy: ""
    log: ""
    log_prefix: ""
    out_interface: ""
    out_interface_list: ""
    protocol: ""
    src_address: ""
    src_address_list: ""
    src_mac_address: ""
    src_port: ""
  - action: "drop"
    chain: "forward"
    comment: "defconf: drop invalid"
    connection_nat_state: ""
    connection_state: "invalid"
    dst_address: ""
    dst_address_list: ""
    dst_port: ""
    flags: ""
    hw_offload: ""
    in_interface: ""
    in_interface_list: ""
    index: "15"
    ipsec_policy: ""
    log: ""
    log_prefix: ""
    out_interface: ""
    out_interface_list: ""
    protocol: ""
    src_address: ""
    src_address_list: ""
    src_mac_address: ""
    src_port: ""
  - action: "drop"
    chain: "forward"
    comment: "defconf: drop all from WAN not DSTNATed"
    connection_nat_state: "!dstnat"
    connection_state: "new"
    dst_address: ""
    dst_address_list: ""
    dst_port: ""
    flags: ""
    hw_offload: ""
    in_interface: ""
    in_interface_list: "WAN"
    index: "16"
    ipsec_policy: ""
    log: ""
    log_prefix: ""
    out_interface: ""
    out_interface_list: ""
    protocol: ""
    src_address: ""
    src_address_list: ""
    src_mac_address: ""
    src_port: ""
  - action: "accept"
    chain: "input"
    comment: "Input"
    connection_nat_state: ""
    connection_state: ""
    dst_address: ""
    dst_address_list: ""
    dst_port: ""
    flags: ""
    hw_offload: ""
    in_interface: ""
    in_interface_list: ""
    index: "17"
    ipsec_policy: ""
    log: ""
    log_prefix: ""
    out_interface: ""
    out_interface_list: ""
    protocol: ""
    src_address: ""
    src_address_list: "Eqinoxe"
    src_mac_address: ""
    src_port: ""
  - action: ""
    chain: "input"
    comment: "related established"
    connection_nat_state: ""
    connection_state: "established,related"
    dst_address: ""
    dst_address_list: ""
    dst_port: ""
    flags: ""
    hw_offload: ""
    in_interface: ""
    in_interface_list: ""
    index: "18"
    ipsec_policy: ""
    log: ""
    log_prefix: ""
    out_interface: ""
    out_interface_list: ""
    protocol: ""
    src_address: ""
    src_address_list: ""
    src_mac_address: ""
    src_port: ""
  - action: ""
    chain: "forward"
    comment: ""
    connection_nat_state: ""
    connection_state: "established,related"
    dst_address: ""
    dst_address_list: ""
    dst_port: ""
    flags: ""
    hw_offload: ""
    in_interface: ""
    in_interface_list: ""
    index: "19"
    ipsec_policy: ""
    log: ""
    log_prefix: ""
    out_interface: ""
    out_interface_list: ""
    protocol: ""
    src_address: ""
    src_address_list: ""
    src_mac_address: "67:33:EB:0E:EB:A8"
    src_port: ""
  - action: "drop"
    chain: "forward"
    comment: "drop invalid connections"
    connection_nat_state: ""
    connection_state: "invalid"
    dst_address: ""
    dst_address_list: ""
    dst_port: ""
    flags: ""
    hw_offload: ""
    in_interface: ""
    in_interface_list: ""
    index: "20"
    ipsec_policy: ""
    log: ""
    log_prefix: ""
    out_interface: ""
    out_interface_list: ""
    protocol: "tcp"
    src_address: ""
    src_address_list: ""
    src_mac_address: ""
    src_port: ""
  - action: "drop"
    chain: "input"
    comment: "Block all entrant"
    connection_nat_state: ""
    connection_state: ""
    dst_address: ""
    dst_address_list: ""
    dst_port: ""
    flags: ""
    hw_offload: ""
    in_interface: "all-ppp"
    in_interface_list: ""
    index: "21"
    ipsec_policy: ""
    log: ""
    log_prefix: ""
    out_interface: ""
    out_interface_list: ""
    protocol: ""
    src_address: ""
    src_address_list: ""
    src_mac_address: ""
    src_port: ""
  - action: "drop"
    chain: "input"
    comment: ""
    connection_nat_state: ""
    connection_state: ""
    dst_address: ""
    dst_address_list: ""
    dst_port: ""
    flags: ""
    hw_offload: ""
    in_interface: "all-ethernet"
    in_interface_list: ""
    index: "22"
    ipsec_policy: ""
    log: ""
    log_prefix: ""
    out_interface: ""
    out_interface_list: ""
    protocol: ""
    src_address: ""
    src_address_list: ""
    src_mac_address: ""
    src_port: ""
