*filter :INPUT ACCEPT :FORWARD ACCEPT :OUTPUT ACCEPT COMMIT