accept dns accept icmp accept tcp 22 accept www.qubes-os.org tcp 443 accept 192.168.0.0/24 tcp drop