0100 allow ip from any to any
65535 deny ip from any to any