<filter name='allow-ipv4' chain='ipv4'> 
  <rule direction='inout' action='accept'/> 
</filter>
