iifname "rxmain" oifname "rxmain" counter accept;
iifname "rxmain" oifname "eth0" counter accept;
iifname "eth0" oifname "rxmain" counter accept;