+ http https squid ssquid
+
+allowservices inbound-untrusted tcp \
+ sunrpc mount nfs
+allowservices inbound-untrusted udp \
+ sunrpc mount nfs
+
+run iptables -A inbound -j ACCEPT \
+ -p udp --destination-port $port_icp \
+ -m limit --limit 10/second --limit-burst 100