$ 0 0 Create a LAN_IN firewall ruleset default accept, drop state invalid, drop destination group incorrect addresses.