filter-primitive UDPTCP
  type ip-protocol
  permit tcp
  permit udp

filter-primitive UDP
  type ip-protocol
  permit udp

filter-primitive TCP
  type ip-protocol
  permit tcp

filter-primitive ICMP
  type ip-protocol
  permit icmp

filter-primitive MCAST
  type ip-address-mask
  permit 224.0.0.0 240.0.0.0

filter-primitive VAR_ADDR
  type ip-address
  permit @{ADDR:-0.0.0.0}

filter-primitive VAR_PORT
  type ip-port
  permit @{PORT:-0}

filter-primitive VAR_PROT
  type ip-protocol
  permit @{PROT:-0}

filter-definition udptcp
  match ip-protocol UDPTCP

filter-definition tcp
  match ip-protocol TCP

filter-definition udp
  match ip-protocol UDP

filter-definition icmp
  match ip-protocol ICMP

filter-definition mcast
  match ip-destination-address MCAST

filter-definition ip-src-addr
  match ip-source-address VAR_ADDR

filter-definition ip-dst-addr
  match ip-destination-address VAR_ADDR

filter-definition ip-prot
  match ip-protocol VAR_PROT

filter-definition ip-src-port
  match ip-source-port VAR_PORT

filter-definition ip-dst-port
  match ip-destination-port VAR_PORT