<filter name='tck-testcase'> <uuid>0a5288ea-612c-834a-6bbf-82a03a1a3244</uuid> <!-- allow incoming ssh connections --> <rule action='accept' direction='in' priority='100'> <tcp dstportstart='22'/> </rule> <!-- allow incoming ICMP (ping) packets --> <rule action='accept' direction='in' priority='200'> <icmp/> </rule> <!-- allow all outgoing traffic --> <rule action='accept' direction='in' priority='300'> <all/> </rule> <!-- drop all other traffic --> <rule action='drop' direction='inout' priority='1000'> <all/> </rule> </filter>