filter filter1
local
type host
address apricot
remote
type host_group
name grp_sales
tos_match 0x03
tos_match_mask 0x0F
service ftp,http
filter filter2
local
type subnet_group
name grp_nets
remote
type subnet
address 129.xxx.yyy.0
mask 255.255.255.0
url
type url_group
name web_sun_group
service http