filter filter1 local type host address apricot remote type host_group name grp_sales tos_match 0x03 tos_match_mask 0x0F service ftp,http filter filter2 local type subnet_group name grp_nets remote type subnet address 129.xxx.yyy.0 mask 255.255.255.0 url type url_group name web_sun_group service http