A filter rule definition takes the following syntax:
action---srcip---srcmask---destip---destmask---protocol--->
>--srcopcode---srcport---destopcode---destport---interface--->
>--routing---direction----+-----+--+----------+--+--------+-----|
+-log-+ +-fragment-+ +-tunnel-+