@IPCHAINS@ -A input -i @EXTDEV@ -p tcp -s @EXTNET@ 1024:65535 -d @EXTIP@ 22 -j ACCEPT
@IPCHAINS@ -A output -i @EXTDEV@ -p tcp ! -y -s @EXTIP@ 22 -d @EXTNET@ 1024:65535 -j ACCEPT
@IPCHAINS@ -A input -i @EXTDEV@ -p tcp -s @EXTNET@ 513:1023 -d @EXTIP@ 22 -j ACCEPT
@IPCHAINS@ -A output -i @EXTDEV@ -p tcp ! -y -s @EXTIP@ 22 -d @EXTNET@ 513:1023 -j ACCEPT
