<filter name='testcase' chain='root'> <uuid>5c6d49af-b071-6127-b4ec-6f8ed4b55335</uuid> <rule action='accept' direction='out' priority='500'> <all ipset='test' ipsetflags='src,dst'/> </rule> <rule action='accept' direction='in' priority='500'> <all state='NONE' ipset='test' ipsetflags='src,dst' comment='in+NONE'/> </rule> <rule action='accept' direction='out' priority='500'> <all state='NONE' ipset='test' ipsetflags='src,dst' comment='out+NONE'/> </rule> <rule action='accept' direction='in' priority='500'> <all ipset='test' ipsetflags='src,dst,src'/> </rule> <rule action='accept' direction='in' priority='500'> <all ipset='test:_.-+' ipsetflags='src,dst,src'/> </rule> <rule action='accept' direction='in' priority='500'> <all ipset='$IPSETNAME' ipsetflags='src,dst'/> </rule> <rule action='accept' direction='inout' priority='500'> <all ipset='$IPSETNAME' ipsetflags='src,dst' comment='inout'/> </rule> </filter>