1 2 3 4 5 6 7 8 9 10
<rule> <family>ip</family> <table>filter</table> <chain>INPUT</chain> <handle>100</handle> <flags>0</flags> <expr type="match"> <name>state</name> </expr> </rule>