#action proto	s_ip		   s_port		d_ip		d_port	comment
permit ip any any any any #allow all