filter-primitive UDPTCP type ip-protocol permit tcp permit udp filter-primitive UDP type ip-protocol permit udp filter-primitive TCP type ip-protocol permit tcp filter-primitive ICMP type ip-protocol permit icmp filter-primitive MCAST type ip-address-mask permit 224.0.0.0 240.0.0.0 filter-primitive VAR_ADDR type ip-address permit @{ADDR:-0.0.0.0} filter-primitive VAR_PORT type ip-port permit @{PORT:-0} filter-primitive VAR_PROT type ip-protocol permit @{PROT:-0} filter-definition udptcp match ip-protocol UDPTCP filter-definition tcp match ip-protocol TCP filter-definition udp match ip-protocol UDP filter-definition icmp match ip-protocol ICMP filter-definition mcast match ip-destination-address MCAST filter-definition ip-src-addr match ip-source-address VAR_ADDR filter-definition ip-dst-addr match ip-destination-address VAR_ADDR filter-definition ip-prot match ip-protocol VAR_PROT filter-definition ip-src-port match ip-source-port VAR_PORT filter-definition ip-dst-port match ip-destination-port VAR_PORT