#ACTION         SOURCE          DEST            PROTO   DEST    SOURCE   ORIGINAL        RATE            USER/   MARK    CONNLIMIT	TIME                                                       PORT    PORT(S)         DEST            LIMIT           GROUP

#DomU exceptions
ACCEPT  net     domU:192.168.0.10	tcp     6660:6669
ACCEPT  domU:192.168.0.10	net     tcp     6660:6669

#DomU restrictions
#irc
REJECT          net             domU            tcp     6660:6669
REJECT          domU            net             tcp     6660:6669
#LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE