I don't think this is the way you should do it - that you should use network policy objects - but I noticed one of my scripts can do a lot of what you want. https://www.ifm.net.nz/cookbooks/mfw.html  ... View more