1 2 3 4 5 6
<rule family="ip" table="filter" chain="INPUT" handle="100"> <rule_flags>0</rule_flags> <expr type="match"> <name>state</name> </expr> </rule>