lan_if="lan0"
wan_if="bge2"

# loading rules from files would be tricky without it
# might actually re-enable it later
set require-order no

# actually load all the rules