From 531c5a83fead906fe97f35d6317ed3b557f1eb5c Mon Sep 17 00:00:00 2001
From: Vadim Kurland <vadim@slot.vk.crocodile.org>
Date: Tue, 5 Jul 2011 14:00:35 -0700
Subject: [PATCH] PolicyCompiler_pf_writers.cpp (processNext): see #2549
 "Update generated route-to configuration for PF versions 4.7 and later", SF
 bug 3348931. The "route-to" parameter moved to the end of pass rules in PF
 4.7

---
 doc/ChangeLog                            |    5 +
 src/pflib/PolicyCompiler_pf_writers.cpp  |    6 +-
 test/pf/firewall40-2.conf                |   28 +
 test/pf/firewall40-2.fw                  |  183 +
 test/pf/objects-for-regression-tests.fwb | 6222 ++++++++++++----------
 test/pf/pf_cluster_4_rc.conf.local       |    4 +-
 6 files changed, 3508 insertions(+), 2940 deletions(-)
 create mode 100644 test/pf/firewall40-2.conf
 create mode 100755 test/pf/firewall40-2.fw

diff --git a/doc/ChangeLog b/doc/ChangeLog
index 97baf040e..9ef825102 100644
--- a/doc/ChangeLog
+++ b/doc/ChangeLog
@@ -1,5 +1,10 @@
 2011-07-05  vadim  <vadim@netcitadel.com>
 
+	* PolicyCompiler_pf_writers.cpp (processNext): see #2549 "Update
+	generated route-to configuration for PF versions 4.7 and later",
+	SF bug 3348931. The "route-to" parameter moved to the end of
+	pass rules in PF 4.7
+
 	* pf.g: fixed bug in PF import: address lists such as "{ addr1,
 	addr2, ... }" defined as macros or inside the rule could not be
 	imported correctly.
diff --git a/src/pflib/PolicyCompiler_pf_writers.cpp b/src/pflib/PolicyCompiler_pf_writers.cpp
index c5713fc44..7bfaf3748 100644
--- a/src/pflib/PolicyCompiler_pf_writers.cpp
+++ b/src/pflib/PolicyCompiler_pf_writers.cpp
@@ -954,7 +954,8 @@ bool PolicyCompiler_pf::PrintRule::processNext()
 
     _printInterface(rule);
 
-    _printRouteOptions(rule);
+    if (XMLTools::version_compare(version, "4.7")<0)
+        _printRouteOptions(rule);
 
     _printAF(rule);
 
@@ -1185,6 +1186,9 @@ bool PolicyCompiler_pf::PrintRule::processNext()
     _printQueue(rule);
     _printLabel(rule);
 
+    if (XMLTools::version_compare(version, "4.7")>=0)
+        _printRouteOptions(rule);
+
     compiler->output << endl;
 
     return true;
diff --git a/test/pf/firewall40-2.conf b/test/pf/firewall40-2.conf
new file mode 100644
index 000000000..4cfd3e74f
--- /dev/null
+++ b/test/pf/firewall40-2.conf
@@ -0,0 +1,28 @@
+
+
+
+# 
+# Rule  0 (NAT)
+# Translate source address
+# for outgoing connections
+match out on  le1 from 192.168.1.0/24 to any nat-to (le1) 
+# 
+# Rule  1 (NAT)
+# Translate source address
+# for outgoing connections
+match out on  le2 from 192.168.1.0/24 to any nat-to (le2) 
+
+# 
+# Rule  0 (fxp0)
+pass in   quick on fxp0 inet proto tcp  from 192.168.1.0/24  to any port { 80, 25 } no state  label "RULE 0 -- ACCEPT "  route-to { ( le1 192.0.2.10 ) } 
+# 
+# Rule  1 (fxp0)
+pass in   quick on fxp0 inet proto tcp  from 192.168.1.0/24  to any port 22 no state  label "RULE 1 -- ACCEPT "  route-to { ( le2 192.0.3.10 ) } 
+# 
+# Rule  2 (fxp0)
+pass in   quick on fxp0 inet proto tcp  from 192.168.1.0/24  to any port 22 flags any  label "RULE 2 -- ACCEPT "  route-to { ( le2 192.0.3.10 ) } 
+# 
+# Rule  fallback rule
+#    fallback rule 
+block  quick inet  from any  to any no state  label "RULE 10000 -- DROP "  
+
diff --git a/test/pf/firewall40-2.fw b/test/pf/firewall40-2.fw
new file mode 100755
index 000000000..06f57aa82
--- /dev/null
+++ b/test/pf/firewall40-2.fw
@@ -0,0 +1,183 @@
+#!/bin/sh
+#
+#  This is automatically generated file. DO NOT MODIFY !
+#
+#  Firewall Builder  fwb_pf v5.0.0.3556
+#
+#  Generated Tue Jul  5 13:58:41 2011 PDT by vadim
+#
+# files: * firewall40-2.fw /etc/firewall40-2.fw
+# files:   firewall40-2.conf /etc/firewall40-2.conf
+#
+# Compiled for pf 4.7
+#
+# testing Route action for PF v4.7 and later
+
+
+
+
+
+FWDIR=`dirname $0`
+
+IFCONFIG="/sbin/ifconfig"
+PFCTL="/sbin/pfctl"
+SYSCTL="/sbin/sysctl"
+LOGGER="/usr/bin/logger"
+
+log() {
+    echo "$1"
+    command -v "$LOGGER" >/dev/null 2>&1 && $LOGGER -p info "$1"
+}
+
+diff_intf() {
+    func=$1
+    list1=$2
+    list2=$3
+    cmd=$4
+    for intf in $list1
+    do
+        echo $list2 | grep -q $intf || {
+        # $vlan is absent in list 2
+            $func $intf $cmd
+        }
+    done
+}
+
+
+missing_address() {
+    address=$1
+    cmd=$2
+
+    oldIFS=$IFS
+    IFS="@"
+    set $address
+    addr=$1
+    interface=$2
+    IFS=$oldIFS
+
+    if echo "$addr" | grep -q ':'
+    then
+        inet="inet6"
+        addr=$(echo "$addr" | sed 's!/! prefixlen !')
+    else
+        inet="inet"
+        addr=$(echo "$addr" | sed 's!/! netmask !')
+    fi
+
+    parameter=""
+    test "$cmd" = "add" && {
+      echo "# Adding ip address: $interface $addr"
+      parameter="alias"
+    }
+    test "$cmd" = "del" && {
+      echo "# Removing ip address: $interface $addr"
+      parameter="delete"
+    }
+
+    $FWBDEBUG $IFCONFIG $interface $inet $addr $parameter || exit 1
+    $FWBDEBUG $IFCONFIG $interface up
+}
+
+list_addresses_by_scope() {
+    interface=$1
+    scope=$2
+    ignore_list=$3
+
+    scope_regex="1"
+    if test -n "$scope"; then scope_regex=" \$0 !~ \"$scope\" "; fi
+
+    $IFCONFIG $interface | sed "s/%$interface//" | \
+      awk -v IGNORED="$ignore_list" \
+        "BEGIN {  
+           split(IGNORED,ignored_arr);
+           for (a in ignored_arr) {ignored_dict[ignored_arr[a]]=1;}
+         }
+         (/inet |inet6 / && $scope_regex && !(\$2 in ignored_dict)) {printf \"%s/%s\n\",\$2,\$4;}" | \
+        while read addr; do
+          echo "${addr}@$interface"
+        done | sort
+   
+}
+
+update_addresses_of_interface() {
+    ignore_list=$2
+    set $1 
+    interface=$1 
+    shift
+
+    FWB_ADDRS=$(
+      for addr in $*; do
+        echo "${addr}@$interface"
+      done | sort
+    )
+
+    CURRENT_ADDRS_ALL_SCOPES=""
+    CURRENT_ADDRS_GLOBAL_SCOPE=""
+
+    $IFCONFIG $interface >/dev/null 2>&1 && {
+      CURRENT_ADDRS_ALL_SCOPES=$(list_addresses_by_scope $interface '' "$ignore_list")
+      CURRENT_ADDRS_GLOBAL_SCOPE=$(list_addresses_by_scope $interface 'scopeid .*' "$ignore_list")
+    } || {
+      echo "# Interface $interface does not exist"
+      # Stop the script if we are not in test mode
+      test -z "$FWBDEBUG" && exit 1
+    }
+
+
+    echo "$interface" | grep -q carp && {
+        diff_intf missing_address "$CURRENT_ADDRS_GLOBAL_SCOPE" "$FWB_ADDRS" del
+        diff_intf missing_address "$FWB_ADDRS" "$CURRENT_ADDRS_ALL_SCOPES" add
+    } || {
+        diff_intf missing_address "$FWB_ADDRS" "$CURRENT_ADDRS_ALL_SCOPES" add
+        diff_intf missing_address "$CURRENT_ADDRS_GLOBAL_SCOPE" "$FWB_ADDRS" del
+    }
+}
+
+verify_interfaces() {
+    :
+    
+}
+
+set_kernel_vars() {
+    :
+    $SYSCTL -w net.inet.ip.forwarding=1
+}
+
+prolog_commands() {
+    :
+    
+}
+
+epilog_commands() {
+    :
+    
+}
+
+run_epilog_and_exit() {
+    epilog_commands
+    exit $1
+}
+
+configure_interfaces() {
+    :
+    update_addresses_of_interface "fxp0 192.168.1.1/0xffffff00" ""
+    update_addresses_of_interface "le1 192.0.2.1/0xffffff00" ""
+    update_addresses_of_interface "le2 192.0.3.1/0xffffff00" ""
+    update_addresses_of_interface "lo0 127.0.0.1/0xff000000" ""
+}
+
+log "Activating firewall script generated Tue Jul  5 13:58:41 2011 by vadim"
+
+set_kernel_vars
+configure_interfaces
+prolog_commands
+
+$PFCTL    -f /etc/firewall40-2.conf || exit 1
+
+
+
+
+
+
+
+epilog_commands
\ No newline at end of file
diff --git a/test/pf/objects-for-regression-tests.fwb b/test/pf/objects-for-regression-tests.fwb
index 8ede73c07..feb55966d 100644
--- a/test/pf/objects-for-regression-tests.fwb
+++ b/test/pf/objects-for-regression-tests.fwb
@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <!DOCTYPE FWObjectDatabase SYSTEM "fwbuilder.dtd">
-<FWObjectDatabase xmlns="http://www.fwbuilder.org/1.0/" version="22" lastModified="1307153244" id="root">
+<FWObjectDatabase xmlns="http://www.fwbuilder.org/1.0/" version="22" lastModified="1309899399" id="root">
   <Library id="syslib000" color="#d4f8ff" name="Standard" comment="Standard objects" ro="True">
     <AnyNetwork id="sysid0" name="Any" comment="Any Network" ro="False" address="0.0.0.0" netmask="0.0.0.0"/>
     <AnyIPService id="sysid1" protocol_num="0" name="Any" comment="Any IP Service" ro="False"/>
@@ -51,9 +51,9 @@
             <PolicyInstallScript arguments="" command="" enabled="False"/>
           </Management>
           <HostOptions>
-            <Option name="snmp_contact"/>
-            <Option name="snmp_description"/>
-            <Option name="snmp_location"/>
+            <Option name="snmp_contact"></Option>
+            <Option name="snmp_description"></Option>
+            <Option name="snmp_location"></Option>
             <Option name="use_mac_addr">false</Option>
             <Option name="use_mac_addr_filter">False</Option>
           </HostOptions>
@@ -69,9 +69,9 @@
             <PolicyInstallScript arguments="" command="" enabled="False"/>
           </Management>
           <HostOptions>
-            <Option name="snmp_contact"/>
-            <Option name="snmp_description"/>
-            <Option name="snmp_location"/>
+            <Option name="snmp_contact"></Option>
+            <Option name="snmp_description"></Option>
+            <Option name="snmp_location"></Option>
             <Option name="use_mac_addr">false</Option>
             <Option name="use_mac_addr_filter">False</Option>
           </HostOptions>
@@ -100,17 +100,17 @@
     </ObjectGroup>
     <ServiceGroup id="stdid05" name="Services" comment="" ro="False">
       <CustomService id="stdid14_1" name="ESTABLISHED" comment="This service matches all packets which are part of network connections established through the firewall, or connections 'related' to those established through the firewall. Term 'established' refers to the state tracking mechanism which exists inside iptables and other stateful firewalls and does not mean any particular combination of packet header options. Packet is considered to correspond to the state 'ESTABLISHED' if it belongs to the network session, for which proper initiation has been seen by the firewall, so its stateful inspection module made appropriate record in the state table. Usually stateful firewalls keep track of network connections using not only tcp protocol, but also udp and sometimes even icmp protocols. 'RELATED' describes packet belonging to a separate network connection, related to the session firewall is keeping track of. One example is FTP command and FTP data sessions." ro="False" protocol="any" address_family="ipv4">
-        <CustomServiceCommand platform="Undefined"/>
+        <CustomServiceCommand platform="Undefined"></CustomServiceCommand>
         <CustomServiceCommand platform="iosacl">established</CustomServiceCommand>
-        <CustomServiceCommand platform="ipfilter"/>
+        <CustomServiceCommand platform="ipfilter"></CustomServiceCommand>
         <CustomServiceCommand platform="ipfw">established</CustomServiceCommand>
         <CustomServiceCommand platform="iptables">-m state --state ESTABLISHED,RELATED</CustomServiceCommand>
         <CustomServiceCommand platform="procurve_acl">established</CustomServiceCommand>
       </CustomService>
       <CustomService id="stdid14_2" name="ESTABLISHED ipv6" comment="This service matches all packets which are part of network connections established through the firewall, or connections 'related' to those established through the firewall. Term 'established' refers to the state tracking mechanism which exists inside iptables and other stateful firewalls and does not mean any particular combination of packet header options. Packet is considered to correspond to the state 'ESTABLISHED' if it belongs to the network session, for which proper initiation has been seen by the firewall, so its stateful inspection module made appropriate record in the state table. Usually stateful firewalls keep track of network connections using not only tcp protocol, but also udp and sometimes even icmp protocols. 'RELATED' describes packet belonging to a separate network connection, related to the session firewall is keeping track of. One example is FTP command and FTP data sessions." ro="False" protocol="any" address_family="ipv6">
-        <CustomServiceCommand platform="Undefined"/>
+        <CustomServiceCommand platform="Undefined"></CustomServiceCommand>
         <CustomServiceCommand platform="iosacl">established</CustomServiceCommand>
-        <CustomServiceCommand platform="ipfilter"/>
+        <CustomServiceCommand platform="ipfilter"></CustomServiceCommand>
         <CustomServiceCommand platform="ipfw">established</CustomServiceCommand>
         <CustomServiceCommand platform="iptables">-m state --state ESTABLISHED,RELATED</CustomServiceCommand>
         <CustomServiceCommand platform="procurve_acl">established</CustomServiceCommand>
@@ -366,54 +366,54 @@
       </ServiceGroup>
       <ServiceGroup id="stdid13" name="Custom" comment="" ro="False">
         <CustomService id="id3B64EEA8" name="rpc" comment="works in iptables and requires patch-o-matic.&#10;For more information look for patch-o-matic on http://www.netfilter.org/" ro="False" protocol="any" address_family="ipv4">
-          <CustomServiceCommand platform="Undefined"/>
-          <CustomServiceCommand platform="ipf"/>
-          <CustomServiceCommand platform="ipfilter"/>
-          <CustomServiceCommand platform="ipfw"/>
+          <CustomServiceCommand platform="Undefined"></CustomServiceCommand>
+          <CustomServiceCommand platform="ipf"></CustomServiceCommand>
+          <CustomServiceCommand platform="ipfilter"></CustomServiceCommand>
+          <CustomServiceCommand platform="ipfw"></CustomServiceCommand>
           <CustomServiceCommand platform="iptables">-m record_rpc</CustomServiceCommand>
-          <CustomServiceCommand platform="pf"/>
-          <CustomServiceCommand platform="pix"/>
-          <CustomServiceCommand platform="unknown"/>
+          <CustomServiceCommand platform="pf"></CustomServiceCommand>
+          <CustomServiceCommand platform="pix"></CustomServiceCommand>
+          <CustomServiceCommand platform="unknown"></CustomServiceCommand>
         </CustomService>
         <CustomService id="id3B64EF4E" name="irc-conn" comment="IRC connection tracker, supports DCC.&#10;Works on iptables and requires patch-o-matic.&#10;For more information look for patch-o-matic on http://www.netfilter.org/&#10;" ro="False" protocol="any" address_family="ipv4">
-          <CustomServiceCommand platform="Undefined"/>
-          <CustomServiceCommand platform="ipf"/>
-          <CustomServiceCommand platform="ipfilter"/>
-          <CustomServiceCommand platform="ipfw"/>
+          <CustomServiceCommand platform="Undefined"></CustomServiceCommand>
+          <CustomServiceCommand platform="ipf"></CustomServiceCommand>
+          <CustomServiceCommand platform="ipfilter"></CustomServiceCommand>
+          <CustomServiceCommand platform="ipfw"></CustomServiceCommand>
           <CustomServiceCommand platform="iptables">-m irc</CustomServiceCommand>
-          <CustomServiceCommand platform="pf"/>
-          <CustomServiceCommand platform="pix"/>
-          <CustomServiceCommand platform="unknown"/>
+          <CustomServiceCommand platform="pf"></CustomServiceCommand>
+          <CustomServiceCommand platform="pix"></CustomServiceCommand>
+          <CustomServiceCommand platform="unknown"></CustomServiceCommand>
         </CustomService>
         <CustomService id="id3B64EF50" name="psd" comment="Port scan detector, works only on iptables and  requires patch-o-matic &#10;For more information look for patch-o-matic on http://www.netfilter.org/" ro="False" protocol="any" address_family="ipv4">
-          <CustomServiceCommand platform="Undefined"/>
-          <CustomServiceCommand platform="ipf"/>
-          <CustomServiceCommand platform="ipfilter"/>
-          <CustomServiceCommand platform="ipfw"/>
+          <CustomServiceCommand platform="Undefined"></CustomServiceCommand>
+          <CustomServiceCommand platform="ipf"></CustomServiceCommand>
+          <CustomServiceCommand platform="ipfilter"></CustomServiceCommand>
+          <CustomServiceCommand platform="ipfw"></CustomServiceCommand>
           <CustomServiceCommand platform="iptables">-m psd --psd-weight-threshold 5 --psd-delay-threshold 10000</CustomServiceCommand>
-          <CustomServiceCommand platform="pf"/>
-          <CustomServiceCommand platform="pix"/>
-          <CustomServiceCommand platform="unknown"/>
+          <CustomServiceCommand platform="pf"></CustomServiceCommand>
+          <CustomServiceCommand platform="pix"></CustomServiceCommand>
+          <CustomServiceCommand platform="unknown"></CustomServiceCommand>
         </CustomService>
         <CustomService id="id3B64EF52" name="string" comment="Matches a string in a whole packet, works in iptables and requires patch-o-matic.&#10;For more information look for patch-o-matic on http://www.netfilter.org/" ro="False" protocol="any" address_family="ipv4">
-          <CustomServiceCommand platform="Undefined"/>
-          <CustomServiceCommand platform="ipf"/>
-          <CustomServiceCommand platform="ipfilter"/>
-          <CustomServiceCommand platform="ipfw"/>
+          <CustomServiceCommand platform="Undefined"></CustomServiceCommand>
+          <CustomServiceCommand platform="ipf"></CustomServiceCommand>
+          <CustomServiceCommand platform="ipfilter"></CustomServiceCommand>
+          <CustomServiceCommand platform="ipfw"></CustomServiceCommand>
           <CustomServiceCommand platform="iptables">-m string --string test_pattern</CustomServiceCommand>
-          <CustomServiceCommand platform="pf"/>
-          <CustomServiceCommand platform="pix"/>
-          <CustomServiceCommand platform="unknown"/>
+          <CustomServiceCommand platform="pf"></CustomServiceCommand>
+          <CustomServiceCommand platform="pix"></CustomServiceCommand>
+          <CustomServiceCommand platform="unknown"></CustomServiceCommand>
         </CustomService>
         <CustomService id="id3B64EF54" name="talk" comment="Talk protocol support. Works in iptables and requires patch-o-matic.&#10;For more information look for patch-o-matic on http://www.netfilter.org/" ro="False" protocol="any" address_family="ipv4">
-          <CustomServiceCommand platform="Undefined"/>
-          <CustomServiceCommand platform="ipf"/>
-          <CustomServiceCommand platform="ipfilter"/>
-          <CustomServiceCommand platform="ipfw"/>
+          <CustomServiceCommand platform="Undefined"></CustomServiceCommand>
+          <CustomServiceCommand platform="ipf"></CustomServiceCommand>
+          <CustomServiceCommand platform="ipfilter"></CustomServiceCommand>
+          <CustomServiceCommand platform="ipfw"></CustomServiceCommand>
           <CustomServiceCommand platform="iptables">-m talk</CustomServiceCommand>
-          <CustomServiceCommand platform="pf"/>
-          <CustomServiceCommand platform="pix"/>
-          <CustomServiceCommand platform="unknown"/>
+          <CustomServiceCommand platform="pf"></CustomServiceCommand>
+          <CustomServiceCommand platform="pix"></CustomServiceCommand>
+          <CustomServiceCommand platform="unknown"></CustomServiceCommand>
         </CustomService>
       </ServiceGroup>
       <ServiceGroup id="stdid19" name="TagServices" comment="" ro="False"/>
@@ -554,7 +554,7 @@
           <IntervalRef ref="sysid2"/>
         </When>
         <PolicyRuleOptions>
-          <Option name="pf_classify_str"/>
+          <Option name="pf_classify_str"></Option>
           <Option name="stateless">False</Option>
         </PolicyRuleOptions>
       </PolicyRule>
@@ -575,7 +575,7 @@
           <IntervalRef ref="sysid2"/>
         </When>
         <PolicyRuleOptions>
-          <Option name="pf_classify_str"/>
+          <Option name="pf_classify_str"></Option>
           <Option name="stateless">False</Option>
         </PolicyRuleOptions>
       </PolicyRule>
@@ -596,7 +596,7 @@
           <IntervalRef ref="sysid2"/>
         </When>
         <PolicyRuleOptions>
-          <Option name="pf_classify_str"/>
+          <Option name="pf_classify_str"></Option>
           <Option name="stateless">False</Option>
         </PolicyRuleOptions>
       </PolicyRule>
@@ -617,7 +617,7 @@
           <IntervalRef ref="sysid2"/>
         </When>
         <PolicyRuleOptions>
-          <Option name="pf_classify_str"/>
+          <Option name="pf_classify_str"></Option>
           <Option name="stateless">False</Option>
         </PolicyRuleOptions>
       </PolicyRule>
@@ -638,7 +638,7 @@
           <IntervalRef ref="sysid2"/>
         </When>
         <PolicyRuleOptions>
-          <Option name="pf_classify_str"/>
+          <Option name="pf_classify_str"></Option>
           <Option name="stateless">False</Option>
         </PolicyRuleOptions>
       </PolicyRule>
@@ -659,7 +659,7 @@
           <IntervalRef ref="sysid2"/>
         </When>
         <PolicyRuleOptions>
-          <Option name="pf_classify_str"/>
+          <Option name="pf_classify_str"></Option>
           <Option name="stateless">False</Option>
         </PolicyRuleOptions>
       </PolicyRule>
@@ -680,7 +680,7 @@
           <IntervalRef ref="sysid2"/>
         </When>
         <PolicyRuleOptions>
-          <Option name="pf_classify_str"/>
+          <Option name="pf_classify_str"></Option>
           <Option name="stateless">False</Option>
         </PolicyRuleOptions>
       </PolicyRule>
@@ -701,7 +701,7 @@
           <IntervalRef ref="sysid2"/>
         </When>
         <PolicyRuleOptions>
-          <Option name="pf_classify_str"/>
+          <Option name="pf_classify_str"></Option>
           <Option name="stateless">False</Option>
         </PolicyRuleOptions>
       </PolicyRule>
@@ -722,7 +722,7 @@
           <IntervalRef ref="sysid2"/>
         </When>
         <PolicyRuleOptions>
-          <Option name="pf_classify_str"/>
+          <Option name="pf_classify_str"></Option>
           <Option name="stateless">False</Option>
         </PolicyRuleOptions>
       </PolicyRule>
@@ -743,7 +743,7 @@
           <IntervalRef ref="sysid2"/>
         </When>
         <PolicyRuleOptions>
-          <Option name="pf_classify_str"/>
+          <Option name="pf_classify_str"></Option>
           <Option name="stateless">False</Option>
         </PolicyRuleOptions>
       </PolicyRule>
@@ -764,7 +764,7 @@
           <IntervalRef ref="sysid2"/>
         </When>
         <PolicyRuleOptions>
-          <Option name="pf_classify_str"/>
+          <Option name="pf_classify_str"></Option>
           <Option name="stateless">False</Option>
         </PolicyRuleOptions>
       </PolicyRule>
@@ -785,7 +785,7 @@
           <IntervalRef ref="sysid2"/>
         </When>
         <PolicyRuleOptions>
-          <Option name="pf_classify_str"/>
+          <Option name="pf_classify_str"></Option>
           <Option name="stateless">False</Option>
         </PolicyRuleOptions>
       </PolicyRule>
@@ -809,7 +809,7 @@
           <IntervalRef ref="sysid2"/>
         </When>
         <PolicyRuleOptions>
-          <Option name="pf_classify_str"/>
+          <Option name="pf_classify_str"></Option>
           <Option name="stateless">True</Option>
         </PolicyRuleOptions>
       </PolicyRule>
@@ -837,7 +837,7 @@
           <IntervalRef ref="sysid2"/>
         </When>
         <PolicyRuleOptions>
-          <Option name="pf_classify_str"/>
+          <Option name="pf_classify_str"></Option>
         </PolicyRuleOptions>
       </PolicyRule>
       <RuleSetOptions/>
@@ -1108,8 +1108,8 @@
             <IntervalRef ref="sysid2"/>
           </When>
           <PolicyRuleOptions>
-            <Option name="color"/>
-            <Option name="pf_classify_str"/>
+            <Option name="color"></Option>
+            <Option name="pf_classify_str"></Option>
           </PolicyRuleOptions>
         </PolicyRule>
         <PolicyRule id="id79899X23273" disabled="False" group="New Group" log="False" position="1" action="Accept" direction="Both" comment="">
@@ -1129,8 +1129,8 @@
             <IntervalRef ref="sysid2"/>
           </When>
           <PolicyRuleOptions>
-            <Option name="color"/>
-            <Option name="pf_classify_str"/>
+            <Option name="color"></Option>
+            <Option name="pf_classify_str"></Option>
           </PolicyRuleOptions>
         </PolicyRule>
         <PolicyRule id="id79926X23273" disabled="False" group="New Group" log="False" position="2" action="Accept" direction="Both" comment="SSH Access to firewall is permitted&#10;only from internal network">
@@ -1150,8 +1150,8 @@
             <IntervalRef ref="sysid2"/>
           </When>
           <PolicyRuleOptions>
-            <Option name="color"/>
-            <Option name="pf_classify_str"/>
+            <Option name="color"></Option>
+            <Option name="pf_classify_str"></Option>
           </PolicyRuleOptions>
         </PolicyRule>
         <PolicyRule id="id79954X23273" disabled="False" group="New Group" log="True" position="3" action="Accept" direction="Both" comment="Firewall uses one of the machines&#10;on internal network for DNS">
@@ -1171,7 +1171,7 @@
             <IntervalRef ref="sysid2"/>
           </When>
           <PolicyRuleOptions>
-            <Option name="pf_classify_str"/>
+            <Option name="pf_classify_str"></Option>
           </PolicyRuleOptions>
         </PolicyRule>
         <PolicyRule id="id79982X23273" disabled="False" group="New Group" log="True" position="4" action="Deny" direction="Both" comment="All other attempts to connect to&#10;the firewall are denied and logged">
@@ -1191,8 +1191,8 @@
             <IntervalRef ref="sysid2"/>
           </When>
           <PolicyRuleOptions>
-            <Option name="color"/>
-            <Option name="pf_classify_str"/>
+            <Option name="color"></Option>
+            <Option name="pf_classify_str"></Option>
           </PolicyRuleOptions>
         </PolicyRule>
         <PolicyRule id="id80010X23273" disabled="False" group="" log="False" position="5" action="Accept" direction="Both" comment="">
@@ -1212,8 +1212,8 @@
             <IntervalRef ref="sysid2"/>
           </When>
           <PolicyRuleOptions>
-            <Option name="color"/>
-            <Option name="pf_classify_str"/>
+            <Option name="color"></Option>
+            <Option name="pf_classify_str"></Option>
           </PolicyRuleOptions>
         </PolicyRule>
         <PolicyRule id="id80039X23273" disabled="False" group="" log="True" position="6" action="Reject" direction="Both" comment="">
@@ -1233,7 +1233,7 @@
             <IntervalRef ref="sysid2"/>
           </When>
           <PolicyRuleOptions>
-            <Option name="pf_classify_str"/>
+            <Option name="pf_classify_str"></Option>
             <Option name="stateless">True</Option>
           </PolicyRuleOptions>
         </PolicyRule>
@@ -1358,11 +1358,11 @@
             <IntervalRef ref="sysid2"/>
           </When>
           <PolicyRuleOptions>
-            <Option name="action_on_reject"/>
+            <Option name="action_on_reject"></Option>
             <Option name="limit_value">0</Option>
-            <Option name="log_limit_suffix"/>
-            <Option name="log_prefix"/>
-            <Option name="pf_classify_str"/>
+            <Option name="log_limit_suffix"></Option>
+            <Option name="log_prefix"></Option>
+            <Option name="pf_classify_str"></Option>
             <Option name="stateless">True</Option>
           </PolicyRuleOptions>
         </PolicyRule>
@@ -1383,11 +1383,11 @@
             <IntervalRef ref="sysid2"/>
           </When>
           <PolicyRuleOptions>
-            <Option name="action_on_reject"/>
+            <Option name="action_on_reject"></Option>
             <Option name="limit_value">0</Option>
-            <Option name="log_limit_suffix"/>
-            <Option name="log_prefix"/>
-            <Option name="pf_classify_str"/>
+            <Option name="log_limit_suffix"></Option>
+            <Option name="log_prefix"></Option>
+            <Option name="pf_classify_str"></Option>
             <Option name="stateless">True</Option>
           </PolicyRuleOptions>
         </PolicyRule>
@@ -1409,7 +1409,7 @@
             <IntervalRef ref="sysid2"/>
           </When>
           <PolicyRuleOptions>
-            <Option name="pf_classify_str"/>
+            <Option name="pf_classify_str"></Option>
             <Option name="stateless">True</Option>
           </PolicyRuleOptions>
         </PolicyRule>
@@ -1430,11 +1430,11 @@
             <IntervalRef ref="sysid2"/>
           </When>
           <PolicyRuleOptions>
-            <Option name="action_on_reject"/>
+            <Option name="action_on_reject"></Option>
             <Option name="limit_value">0</Option>
-            <Option name="log_limit_suffix"/>
-            <Option name="log_prefix"/>
-            <Option name="pf_classify_str"/>
+            <Option name="log_limit_suffix"></Option>
+            <Option name="log_prefix"></Option>
+            <Option name="pf_classify_str"></Option>
             <Option name="stateless">True</Option>
           </PolicyRuleOptions>
         </PolicyRule>
@@ -1455,7 +1455,7 @@
             <IntervalRef ref="sysid2"/>
           </When>
           <PolicyRuleOptions>
-            <Option name="pf_classify_str"/>
+            <Option name="pf_classify_str"></Option>
             <Option name="stateless">True</Option>
           </PolicyRuleOptions>
         </PolicyRule>
@@ -1485,27 +1485,27 @@
         <Option name="accept_established">False</Option>
         <Option name="accept_new_tcp_with_no_syn">False</Option>
         <Option name="action_on_reject">ICMP net unreachable</Option>
-        <Option name="activationCmd"/>
-        <Option name="admUser"/>
-        <Option name="altAddress"/>
+        <Option name="activationCmd"></Option>
+        <Option name="admUser"></Option>
+        <Option name="altAddress"></Option>
         <Option name="check_shading">False</Option>
         <Option name="clamp_mss_to_mtu">False</Option>
-        <Option name="cmdline"/>
-        <Option name="compiler"/>
+        <Option name="cmdline"></Option>
+        <Option name="compiler"></Option>
         <Option name="configure_interfaces">False</Option>
         <Option name="debug">False</Option>
         <Option name="dyn_addr">False</Option>
         <Option name="enable_ipv6">False</Option>
-        <Option name="epilog_script"/>
+        <Option name="epilog_script"></Option>
         <Option name="fallback_log">False</Option>
-        <Option name="firewall_dir"/>
+        <Option name="firewall_dir"></Option>
         <Option name="firewall_is_part_of_any">True</Option>
         <Option name="firewall_is_part_of_any_and_networks">True</Option>
         <Option name="ignore_empty_groups">True</Option>
         <Option name="in_out_code">True</Option>
-        <Option name="inst_cmdline"/>
-        <Option name="inst_script"/>
-        <Option name="install_script"/>
+        <Option name="inst_cmdline"></Option>
+        <Option name="inst_script"></Option>
+        <Option name="install_script"></Option>
         <Option name="ipv4_6_order">ipv4_first</Option>
         <Option name="limit_suffix">/second</Option>
         <Option name="limit_value">0</Option>
@@ -1518,11 +1518,11 @@
         <Option name="log_level">debug</Option>
         <Option name="log_limit_suffix">/second</Option>
         <Option name="log_limit_value">0</Option>
-        <Option name="log_prefix"/>
+        <Option name="log_prefix"></Option>
         <Option name="log_tcp_opt">False</Option>
         <Option name="log_tcp_seq">False</Option>
         <Option name="manage_virtual_addr">True</Option>
-        <Option name="mgmt_addr"/>
+        <Option name="mgmt_addr"></Option>
         <Option name="mgmt_ssh">False</Option>
         <Option name="modulate_state">True</Option>
         <Option name="no_iochains_for_any">False</Option>
@@ -1531,9 +1531,9 @@
         <Option name="openbsd_ip_forward">1</Option>
         <Option name="openbsd_ip_redirect">0</Option>
         <Option name="openbsd_ip_sourceroute">0</Option>
-        <Option name="openbsd_path_pfctl"/>
-        <Option name="openbsd_path_sysctl"/>
-        <Option name="output_file"/>
+        <Option name="openbsd_path_pfctl"></Option>
+        <Option name="openbsd_path_sysctl"></Option>
+        <Option name="output_file"></Option>
         <Option name="pass_all_out">False</Option>
         <Option name="pf_adaptive_end">0</Option>
         <Option name="pf_adaptive_start">0</Option>
@@ -1552,7 +1552,7 @@
         <Option name="pf_limit_states">10000</Option>
         <Option name="pf_limit_table_entries">0</Option>
         <Option name="pf_limit_tables">0</Option>
-        <Option name="pf_optimization"/>
+        <Option name="pf_optimization"></Option>
         <Option name="pf_other_first">0</Option>
         <Option name="pf_other_multiple">0</Option>
         <Option name="pf_other_single">0</Option>
@@ -1593,12 +1593,12 @@
         <Option name="pf_udp_single">0</Option>
         <Option name="platform">iptables</Option>
         <Option name="prolog_place">fw_file</Option>
-        <Option name="prolog_script"/>
-        <Option name="script_env_path"/>
-        <Option name="snmp_contact"/>
-        <Option name="snmp_description"/>
-        <Option name="snmp_location"/>
-        <Option name="sshArgs"/>
+        <Option name="prolog_script"></Option>
+        <Option name="script_env_path"></Option>
+        <Option name="snmp_contact"></Option>
+        <Option name="snmp_description"></Option>
+        <Option name="snmp_location"></Option>
+        <Option name="sshArgs"></Option>
         <Option name="use_numeric_log_levels">False</Option>
         <Option name="use_tables">True</Option>
       </FirewallOptions>
@@ -1651,7 +1651,7 @@
         <Option name="enable_stp">False</Option>
         <Option name="iface_configure_mtu">False</Option>
         <Option name="iface_mtu">1500</Option>
-        <Option name="iface_options"/>
+        <Option name="iface_options"></Option>
         <Option name="type">8021q</Option>
         <Option name="vlan_id">102</Option>
       </InterfaceOptions>
@@ -1772,9 +1772,9 @@
             <PolicyInstallScript arguments="" command="" enabled="False"/>
           </Management>
           <HostOptions>
-            <Option name="snmp_contact"/>
-            <Option name="snmp_description"/>
-            <Option name="snmp_location"/>
+            <Option name="snmp_contact"></Option>
+            <Option name="snmp_description"></Option>
+            <Option name="snmp_location"></Option>
             <Option name="use_mac_addr_filter">False</Option>
           </HostOptions>
         </Host>
@@ -1789,9 +1789,9 @@
             <PolicyInstallScript arguments="" command="" enabled="False"/>
           </Management>
           <HostOptions>
-            <Option name="snmp_contact"/>
-            <Option name="snmp_description"/>
-            <Option name="snmp_location"/>
+            <Option name="snmp_contact"></Option>
+            <Option name="snmp_description"></Option>
+            <Option name="snmp_location"></Option>
             <Option name="use_mac_addr_filter">False</Option>
           </HostOptions>
         </Host>
@@ -1914,9 +1914,9 @@
             <PolicyInstallScript arguments="" command="" enabled="False"/>
           </Management>
           <HostOptions>
-            <Option name="snmp_contact"/>
-            <Option name="snmp_description"/>
-            <Option name="snmp_location"/>
+            <Option name="snmp_contact"></Option>
+            <Option name="snmp_description"></Option>
+            <Option name="snmp_location"></Option>
             <Option name="use_mac_addr_filter">True</Option>
           </HostOptions>
         </Host>
@@ -1932,9 +1932,9 @@
             <PolicyInstallScript arguments="" command="" enabled="False"/>
           </Management>
           <HostOptions>
-            <Option name="snmp_contact"/>
-            <Option name="snmp_description"/>
-            <Option name="snmp_location"/>
+            <Option name="snmp_contact"></Option>
+            <Option name="snmp_description"></Option>
+            <Option name="snmp_location"></Option>
             <Option name="use_mac_addr_filter">False</Option>
           </HostOptions>
         </Host>
@@ -1949,9 +1949,9 @@
             <PolicyInstallScript arguments="" command="" enabled="False"/>
           </Management>
           <HostOptions>
-            <Option name="snmp_contact"/>
-            <Option name="snmp_description"/>
-            <Option name="snmp_location"/>
+            <Option name="snmp_contact"></Option>
+            <Option name="snmp_description"></Option>
+            <Option name="snmp_location"></Option>
             <Option name="use_mac_addr">False</Option>
             <Option name="use_mac_addr_filter">False</Option>
           </HostOptions>
@@ -1967,9 +1967,9 @@
             <PolicyInstallScript arguments="" command="" enabled="False"/>
           </Management>
           <HostOptions>
-            <Option name="snmp_contact"/>
-            <Option name="snmp_description"/>
-            <Option name="snmp_location"/>
+            <Option name="snmp_contact"></Option>
+            <Option name="snmp_description"></Option>
+            <Option name="snmp_location"></Option>
             <Option name="use_mac_addr">False</Option>
             <Option name="use_mac_addr_filter">False</Option>
           </HostOptions>
@@ -1985,9 +1985,9 @@
             <PolicyInstallScript arguments="" command="" enabled="False"/>
           </Management>
           <HostOptions>
-            <Option name="snmp_contact"/>
-            <Option name="snmp_description"/>
-            <Option name="snmp_location"/>
+            <Option name="snmp_contact"></Option>
+            <Option name="snmp_description"></Option>
+            <Option name="snmp_location"></Option>
             <Option name="use_mac_addr">False</Option>
             <Option name="use_mac_addr_filter">False</Option>
           </HostOptions>
@@ -2003,9 +2003,9 @@
             <PolicyInstallScript arguments="" command="" enabled="False"/>
           </Management>
           <HostOptions>
-            <Option name="snmp_contact"/>
-            <Option name="snmp_description"/>
-            <Option name="snmp_location"/>
+            <Option name="snmp_contact"></Option>
+            <Option name="snmp_description"></Option>
+            <Option name="snmp_location"></Option>
             <Option name="use_mac_addr">False</Option>
             <Option name="use_mac_addr_filter">False</Option>
           </HostOptions>
@@ -2021,9 +2021,9 @@
             <PolicyInstallScript arguments="" command="" enabled="False"/>
           </Management>
           <HostOptions>
-            <Option name="snmp_contact"/>
-            <Option name="snmp_description"/>
-            <Option name="snmp_location"/>
+            <Option name="snmp_contact"></Option>
+            <Option name="snmp_description"></Option>
+            <Option name="snmp_location"></Option>
             <Option name="use_mac_addr">False</Option>
             <Option name="use_mac_addr_filter">False</Option>
           </HostOptions>
@@ -2039,9 +2039,9 @@
             <PolicyInstallScript arguments="" command="" enabled="False"/>
           </Management>
           <HostOptions>
-            <Option name="snmp_contact"/>
-            <Option name="snmp_description"/>
-            <Option name="snmp_location"/>
+            <Option name="snmp_contact"></Option>
+            <Option name="snmp_description"></Option>
+            <Option name="snmp_location"></Option>
             <Option name="use_mac_addr">false</Option>
             <Option name="use_mac_addr_filter">False</Option>
           </HostOptions>
@@ -2057,9 +2057,9 @@
             <PolicyInstallScript arguments="" command="" enabled="False"/>
           </Management>
           <HostOptions>
-            <Option name="snmp_contact"/>
-            <Option name="snmp_description"/>
-            <Option name="snmp_location"/>
+            <Option name="snmp_contact"></Option>
+            <Option name="snmp_description"></Option>
+            <Option name="snmp_location"></Option>
             <Option name="use_mac_addr">false</Option>
             <Option name="use_mac_addr_filter">False</Option>
           </HostOptions>
@@ -2233,46 +2233,46 @@
       </ServiceGroup>
       <ServiceGroup id="stdid13_1" name="Custom" comment="" ro="False">
         <CustomService id="id3B64FE22" name="talk" comment="Talk support" ro="False" protocol="any" address_family="ipv4">
-          <CustomServiceCommand platform="Undefined"/>
-          <CustomServiceCommand platform="fwsm"/>
-          <CustomServiceCommand platform="iosacl"/>
-          <CustomServiceCommand platform="ipf"/>
-          <CustomServiceCommand platform="ipfilter"/>
-          <CustomServiceCommand platform="ipfw"/>
+          <CustomServiceCommand platform="Undefined"></CustomServiceCommand>
+          <CustomServiceCommand platform="fwsm"></CustomServiceCommand>
+          <CustomServiceCommand platform="iosacl"></CustomServiceCommand>
+          <CustomServiceCommand platform="ipf"></CustomServiceCommand>
+          <CustomServiceCommand platform="ipfilter"></CustomServiceCommand>
+          <CustomServiceCommand platform="ipfw"></CustomServiceCommand>
           <CustomServiceCommand platform="iptables">-m ip_conntrack_talk -m ip_nat_talk</CustomServiceCommand>
-          <CustomServiceCommand platform="pf"/>
-          <CustomServiceCommand platform="pix"/>
-          <CustomServiceCommand platform="unknown"/>
+          <CustomServiceCommand platform="pf"></CustomServiceCommand>
+          <CustomServiceCommand platform="pix"></CustomServiceCommand>
+          <CustomServiceCommand platform="unknown"></CustomServiceCommand>
         </CustomService>
         <CustomService id="id41F9FFBA" name="natproto" comment="for bug 1111267: should add proto {tcp udp icmp gre}" ro="False" protocol=" {tcp udp icmp gre}" address_family="ipv4">
-          <CustomServiceCommand platform="fwsm"/>
-          <CustomServiceCommand platform="iosacl"/>
-          <CustomServiceCommand platform="ipf"/>
-          <CustomServiceCommand platform="ipfw"/>
-          <CustomServiceCommand platform="iptables"/>
+          <CustomServiceCommand platform="fwsm"></CustomServiceCommand>
+          <CustomServiceCommand platform="iosacl"></CustomServiceCommand>
+          <CustomServiceCommand platform="ipf"></CustomServiceCommand>
+          <CustomServiceCommand platform="ipfw"></CustomServiceCommand>
+          <CustomServiceCommand platform="iptables"></CustomServiceCommand>
           <CustomServiceCommand platform="pf"> </CustomServiceCommand>
-          <CustomServiceCommand platform="pix"/>
-          <CustomServiceCommand platform="unknown"/>
+          <CustomServiceCommand platform="pix"></CustomServiceCommand>
+          <CustomServiceCommand platform="unknown"></CustomServiceCommand>
         </CustomService>
         <CustomService id="id78051X16372" name="all protocols pf" comment="" ro="False" protocol="{tcp udp icmp gre}" address_family="ipv4">
-          <CustomServiceCommand platform="fwsm"/>
-          <CustomServiceCommand platform="iosacl"/>
-          <CustomServiceCommand platform="ipf"/>
-          <CustomServiceCommand platform="ipfw"/>
-          <CustomServiceCommand platform="iptables"/>
+          <CustomServiceCommand platform="fwsm"></CustomServiceCommand>
+          <CustomServiceCommand platform="iosacl"></CustomServiceCommand>
+          <CustomServiceCommand platform="ipf"></CustomServiceCommand>
+          <CustomServiceCommand platform="ipfw"></CustomServiceCommand>
+          <CustomServiceCommand platform="iptables"></CustomServiceCommand>
           <CustomServiceCommand platform="pf"> </CustomServiceCommand>
-          <CustomServiceCommand platform="pix"/>
-          <CustomServiceCommand platform="unknown"/>
+          <CustomServiceCommand platform="pix"></CustomServiceCommand>
+          <CustomServiceCommand platform="unknown"></CustomServiceCommand>
         </CustomService>
         <CustomService id="id15832X50242" name="natproto (old style)" comment="for bug 1111267: should add proto {tcp udp icmp gre}, compiler&#10;should recognize &quot;proto ...&quot; in the code string" ro="False" protocol="any" address_family="ipv4">
-          <CustomServiceCommand platform="fwsm"/>
-          <CustomServiceCommand platform="iosacl"/>
-          <CustomServiceCommand platform="ipf"/>
-          <CustomServiceCommand platform="ipfw"/>
-          <CustomServiceCommand platform="iptables"/>
+          <CustomServiceCommand platform="fwsm"></CustomServiceCommand>
+          <CustomServiceCommand platform="iosacl"></CustomServiceCommand>
+          <CustomServiceCommand platform="ipf"></CustomServiceCommand>
+          <CustomServiceCommand platform="ipfw"></CustomServiceCommand>
+          <CustomServiceCommand platform="iptables"></CustomServiceCommand>
           <CustomServiceCommand platform="pf">proto  {tcp udp icmp gre}</CustomServiceCommand>
-          <CustomServiceCommand platform="pix"/>
-          <CustomServiceCommand platform="unknown"/>
+          <CustomServiceCommand platform="pix"></CustomServiceCommand>
+          <CustomServiceCommand platform="unknown"></CustomServiceCommand>
         </CustomService>
       </ServiceGroup>
       <ServiceGroup id="stdid05_1_userservices" name="Users" comment="" ro="False">
@@ -2409,7 +2409,7 @@
               <ObjectRef ref="if-FW-firewall2-eth1"/>
             </Itf>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -2430,7 +2430,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -2452,7 +2452,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -2470,7 +2470,7 @@
               <ObjectRef ref="if-FW-firewall2-eth0"/>
             </Itf>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id3C4E4C38" disabled="False" group="" log="True" position="4" action="Deny" direction="Inbound" comment="code should go into INPUT chain with &#10;address in destination for comparison">
@@ -2487,7 +2487,7 @@
               <ObjectRef ref="if-FW-firewall2-eth0"/>
             </Itf>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -2509,11 +2509,11 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
+              <Option name="action_on_reject"></Option>
               <Option name="limit_value">0</Option>
-              <Option name="log_limit_suffix"/>
+              <Option name="log_limit_suffix"></Option>
               <Option name="log_prefix">** RULE %N</Option>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -2536,7 +2536,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -2557,11 +2557,11 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
-              <Option name="limit_suffix"/>
+              <Option name="action_on_reject"></Option>
+              <Option name="limit_suffix"></Option>
               <Option name="limit_value">0</Option>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id3BF1B44E" disabled="True" group="" log="False" position="8" action="Accept" direction="Both" comment="">
@@ -2581,11 +2581,11 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
-              <Option name="limit_suffix"/>
+              <Option name="action_on_reject"></Option>
+              <Option name="limit_suffix"></Option>
               <Option name="limit_value">0</Option>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="pol-firewall2-3" disabled="False" group="" log="False" position="9" action="Accept" direction="Both" comment="this rule is limited to 4 simultaneous&#10;connections by rule options">
@@ -2608,11 +2608,11 @@
               <IntervalRef ref="id3C63479E"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
-              <Option name="limit_suffix"/>
+              <Option name="action_on_reject"></Option>
+              <Option name="limit_suffix"></Option>
               <Option name="limit_value">0</Option>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_rule_max_state">4</Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
@@ -2635,11 +2635,11 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
-              <Option name="limit_suffix"/>
+              <Option name="action_on_reject"></Option>
+              <Option name="limit_suffix"></Option>
               <Option name="limit_value">0</Option>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_max_src_nodes">10</Option>
               <Option name="pf_max_src_states">10</Option>
               <Option name="pf_rule_max_state">0</Option>
@@ -2664,19 +2664,19 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
-              <Option name="limit_suffix"/>
+              <Option name="action_on_reject"></Option>
+              <Option name="limit_suffix"></Option>
               <Option name="limit_value">0</Option>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_flush">False</Option>
               <Option name="pf_max_src_conn_rate_global">False</Option>
               <Option name="pf_max_src_conn_rate_num">3</Option>
-              <Option name="pf_max_src_conn_rate_overload_table"/>
+              <Option name="pf_max_src_conn_rate_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_seconds">15</Option>
               <Option name="pf_max_src_nodes">10</Option>
               <Option name="pf_max_src_states">10</Option>
@@ -2703,11 +2703,11 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
-              <Option name="limit_suffix"/>
+              <Option name="action_on_reject"></Option>
+              <Option name="limit_suffix"></Option>
               <Option name="limit_value">0</Option>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_max_src_nodes">75</Option>
               <Option name="pf_max_src_states">2</Option>
               <Option name="pf_rule_max_state">10</Option>
@@ -2733,11 +2733,11 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
-              <Option name="limit_suffix"/>
+              <Option name="action_on_reject"></Option>
+              <Option name="limit_suffix"></Option>
               <Option name="limit_value">0</Option>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="pol-firewall2-4" disabled="False" group="" log="False" position="14" action="Accept" direction="Both" comment="">
@@ -2758,11 +2758,11 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
-              <Option name="limit_suffix"/>
+              <Option name="action_on_reject"></Option>
+              <Option name="limit_suffix"></Option>
               <Option name="limit_value">0</Option>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id3CE597E3" disabled="True" group="" log="False" position="15" action="Accept" direction="Both" comment="this rule and the next one can be&#10;used to test shading">
@@ -2782,11 +2782,11 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
-              <Option name="limit_suffix"/>
+              <Option name="action_on_reject"></Option>
+              <Option name="limit_suffix"></Option>
               <Option name="limit_value">0</Option>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id3CE591F6" disabled="False" group="" log="False" position="16" action="Accept" direction="Both" comment="">
@@ -2806,11 +2806,11 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
-              <Option name="limit_suffix"/>
+              <Option name="action_on_reject"></Option>
+              <Option name="limit_suffix"></Option>
               <Option name="limit_value">0</Option>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id3EE2579E" disabled="True" group="" log="False" position="17" action="Accept" direction="Both" comment="illegal rule - object firewall8 has&#10;dynamic interface">
@@ -2832,7 +2832,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="pol-firewall2-5" disabled="False" group="" log="False" position="18" action="Accept" direction="Both" comment="Automatically generated 'masquerading' rule">
@@ -2853,11 +2853,11 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
-              <Option name="limit_suffix"/>
+              <Option name="action_on_reject"></Option>
+              <Option name="limit_suffix"></Option>
               <Option name="limit_value">0</Option>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id15806X38936" disabled="False" group="" log="False" position="19" action="Accept" direction="Both" comment="test for bug 1111267: &quot;CustomService should specify protocol and parameters for it&quot;&#10;Should generate &quot;proto { tcp udp icmp gre}&quot;&#10;">
@@ -2877,7 +2877,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -2898,7 +2898,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -2919,7 +2919,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -2940,7 +2940,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -2961,12 +2961,12 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
-              <Option name="limit_suffix"/>
+              <Option name="action_on_reject"></Option>
+              <Option name="limit_suffix"></Option>
               <Option name="limit_value">0</Option>
-              <Option name="log_limit_suffix"/>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_limit_suffix"></Option>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -2996,14 +2996,14 @@
           <Option name="accept_established">False</Option>
           <Option name="accept_new_tcp_with_no_syn">False</Option>
           <Option name="action_on_reject">ICMP net unreachable</Option>
-          <Option name="activationCmd"/>
-          <Option name="admUser"/>
-          <Option name="altAddress"/>
+          <Option name="activationCmd"></Option>
+          <Option name="admUser"></Option>
+          <Option name="altAddress"></Option>
           <Option name="check_shading">True</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
           <Option name="cmdline">-xt</Option>
-          <Option name="compiler"/>
-          <Option name="conf1_file"/>
+          <Option name="compiler"></Option>
+          <Option name="conf1_file"></Option>
           <Option name="conf_file_name_on_firewall">/etc/pf.conf</Option>
           <Option name="configure_bridge_interfaces">False</Option>
           <Option name="configure_carp_interfaces">False</Option>
@@ -3012,7 +3012,7 @@
           <Option name="configure_vlan_interfaces">False</Option>
           <Option name="debug">False</Option>
           <Option name="dyn_addr">False</Option>
-          <Option name="epilog_script"/>
+          <Option name="epilog_script"></Option>
           <Option name="fallback_log">True</Option>
           <Option name="firewall_dir">/etc/firewall</Option>
           <Option name="firewall_is_part_of_any">True</Option>
@@ -3021,9 +3021,9 @@
           <Option name="generate_shell_script">True</Option>
           <Option name="ignore_empty_groups">False</Option>
           <Option name="in_out_code">True</Option>
-          <Option name="inst_cmdline"/>
-          <Option name="inst_script"/>
-          <Option name="install_script"/>
+          <Option name="inst_cmdline"></Option>
+          <Option name="inst_script"></Option>
+          <Option name="install_script"></Option>
           <Option name="ipv4_6_order">ipv4_first</Option>
           <Option name="limit_suffix">/second</Option>
           <Option name="limit_value">0</Option>
@@ -3049,13 +3049,13 @@
           <Option name="openbsd_ip_forward">1</Option>
           <Option name="openbsd_ip_redirect">0</Option>
           <Option name="openbsd_ip_sourceroute">0</Option>
-          <Option name="openbsd_path_pfctl"/>
-          <Option name="openbsd_path_sysctl"/>
-          <Option name="output_file"/>
+          <Option name="openbsd_path_pfctl"></Option>
+          <Option name="openbsd_path_sysctl"></Option>
+          <Option name="output_file"></Option>
           <Option name="pass_all_out">False</Option>
           <Option name="pf_adaptive_end">12000</Option>
           <Option name="pf_adaptive_start">6000</Option>
-          <Option name="pf_block_policy"/>
+          <Option name="pf_block_policy"></Option>
           <Option name="pf_do_limit_frags">True</Option>
           <Option name="pf_do_limit_src_nodes">True</Option>
           <Option name="pf_do_limit_states">True</Option>
@@ -3073,7 +3073,7 @@
           <Option name="pf_limit_table_entries">1000000</Option>
           <Option name="pf_limit_tables">1000</Option>
           <Option name="pf_modulate_state">True</Option>
-          <Option name="pf_optimization"/>
+          <Option name="pf_optimization"></Option>
           <Option name="pf_other_first">10</Option>
           <Option name="pf_other_multiple">10</Option>
           <Option name="pf_other_single">10</Option>
@@ -3088,7 +3088,7 @@
           <Option name="pf_scrub_use_maxmss">False</Option>
           <Option name="pf_scrub_use_minttl">False</Option>
           <Option name="pf_set_adaptive">True</Option>
-          <Option name="pf_set_debug"/>
+          <Option name="pf_set_debug"></Option>
           <Option name="pf_set_icmp_error">True</Option>
           <Option name="pf_set_icmp_first">True</Option>
           <Option name="pf_set_other_first">True</Option>
@@ -3103,7 +3103,7 @@
           <Option name="pf_set_udp_first">True</Option>
           <Option name="pf_set_udp_multiple">True</Option>
           <Option name="pf_set_udp_single">True</Option>
-          <Option name="pf_state_policy"/>
+          <Option name="pf_state_policy"></Option>
           <Option name="pf_tcp_closed">30</Option>
           <Option name="pf_tcp_closing">60</Option>
           <Option name="pf_tcp_established">86400</Option>
@@ -3119,13 +3119,13 @@
           <Option name="prolog_place">fw_file</Option>
           <Option name="prolog_script">echo 'This is prolog script'
 </Option>
-          <Option name="scpArgs"/>
-          <Option name="script_env_path"/>
+          <Option name="scpArgs"></Option>
+          <Option name="script_env_path"></Option>
           <Option name="script_name_on_firewall">/etc/pf.fw</Option>
-          <Option name="snmp_contact"/>
-          <Option name="snmp_description"/>
-          <Option name="snmp_location"/>
-          <Option name="sshArgs"/>
+          <Option name="snmp_contact"></Option>
+          <Option name="snmp_description"></Option>
+          <Option name="snmp_location"></Option>
+          <Option name="sshArgs"></Option>
           <Option name="use_numeric_log_levels">False</Option>
           <Option name="use_tables">True</Option>
         </FirewallOptions>
@@ -3615,7 +3615,7 @@
               <ObjectRef ref="id3AF5AA96"/>
             </Itf>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -3636,7 +3636,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -3655,7 +3655,7 @@
               <ObjectRef ref="id3AF5AA99"/>
             </Itf>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -3673,7 +3673,7 @@
               <ObjectRef ref="id3AF5AA99"/>
             </Itf>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -3694,7 +3694,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id3CCA26E4" disabled="False" group="" log="True" position="5" action="Deny" direction="Both" comment="">
@@ -3714,7 +3714,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -3735,7 +3735,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -3756,7 +3756,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id4119961C" disabled="False" group="" log="True" position="8" action="Deny" direction="Both" comment="testing negation in the policy rule">
@@ -3776,11 +3776,11 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
+              <Option name="action_on_reject"></Option>
               <Option name="limit_suffix">/minute</Option>
               <Option name="limit_value">10</Option>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -3802,11 +3802,11 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
+              <Option name="action_on_reject"></Option>
               <Option name="limit_suffix">/minute</Option>
               <Option name="limit_value">10</Option>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -3828,7 +3828,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -3850,7 +3850,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -3873,7 +3873,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -3894,11 +3894,11 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
+              <Option name="action_on_reject"></Option>
               <Option name="limit_suffix">/minute</Option>
               <Option name="limit_value">10</Option>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -3921,7 +3921,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -3944,7 +3944,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id3B45739A" disabled="False" group="" log="True" position="16" action="Deny" direction="Both" comment="">
@@ -3964,7 +3964,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -3985,7 +3985,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id14484X90789" disabled="False" group="" log="False" position="18" action="Accept" direction="Both" comment="">
@@ -4005,7 +4005,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -4026,7 +4026,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -4047,7 +4047,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -4085,28 +4085,28 @@
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
           <Option name="action_on_reject">ICMP net unreachable</Option>
-          <Option name="activationCmd"/>
-          <Option name="admUser"/>
-          <Option name="altAddress"/>
+          <Option name="activationCmd"></Option>
+          <Option name="admUser"></Option>
+          <Option name="altAddress"></Option>
           <Option name="check_shading">True</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
-          <Option name="cmdline"/>
-          <Option name="compiler"/>
+          <Option name="cmdline"></Option>
+          <Option name="compiler"></Option>
           <Option name="configure_interfaces">False</Option>
           <Option name="debug">False</Option>
           <Option name="dyn_addr">False</Option>
-          <Option name="epilog_script"/>
+          <Option name="epilog_script"></Option>
           <Option name="fallback_log">False</Option>
-          <Option name="firewall_dir"/>
+          <Option name="firewall_dir"></Option>
           <Option name="firewall_is_part_of_any">True</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="generate_rc_conf_file">False</Option>
           <Option name="generate_shell_script">True</Option>
           <Option name="ignore_empty_groups">False</Option>
           <Option name="in_out_code">True</Option>
-          <Option name="inst_cmdline"/>
-          <Option name="inst_script"/>
-          <Option name="install_script"/>
+          <Option name="inst_cmdline"></Option>
+          <Option name="inst_script"></Option>
+          <Option name="install_script"></Option>
           <Option name="limit_suffix">/day</Option>
           <Option name="limit_value">0</Option>
           <Option name="linux24_ip_forward">0</Option>
@@ -4118,18 +4118,18 @@
           <Option name="log_level">debug</Option>
           <Option name="log_limit_suffix">/second</Option>
           <Option name="log_limit_value">0</Option>
-          <Option name="log_prefix"/>
+          <Option name="log_prefix"></Option>
           <Option name="log_tcp_opt">False</Option>
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"/>
+          <Option name="mgmt_addr"></Option>
           <Option name="mgmt_ssh">False</Option>
           <Option name="modulate_state">False</Option>
           <Option name="no_iochains_for_any">False</Option>
           <Option name="no_optimisation">False</Option>
-          <Option name="openbsd_path_pfctl"/>
-          <Option name="openbsd_path_sysctl"/>
-          <Option name="output_file"/>
+          <Option name="openbsd_path_pfctl"></Option>
+          <Option name="openbsd_path_sysctl"></Option>
+          <Option name="output_file"></Option>
           <Option name="pass_all_out">False</Option>
           <Option name="pf_adaptive_end">0</Option>
           <Option name="pf_adaptive_start">0</Option>
@@ -4142,7 +4142,7 @@
           <Option name="pf_icmp_first">0</Option>
           <Option name="pf_limit_frags">5000</Option>
           <Option name="pf_limit_states">1000</Option>
-          <Option name="pf_optimization"/>
+          <Option name="pf_optimization"></Option>
           <Option name="pf_other_first">0</Option>
           <Option name="pf_other_multiple">0</Option>
           <Option name="pf_other_single">0</Option>
@@ -4191,11 +4191,11 @@
 
 </Option>
           <Option name="proxy_arp">False</Option>
-          <Option name="script_env_path"/>
-          <Option name="snmp_contact"/>
-          <Option name="snmp_description"/>
-          <Option name="snmp_location"/>
-          <Option name="sshArgs"/>
+          <Option name="script_env_path"></Option>
+          <Option name="snmp_contact"></Option>
+          <Option name="snmp_description"></Option>
+          <Option name="snmp_location"></Option>
+          <Option name="sshArgs"></Option>
           <Option name="use_ip_tool">False</Option>
           <Option name="use_numeric_log_levels">False</Option>
           <Option name="use_tables">True</Option>
@@ -4306,7 +4306,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id3DE6947B" disabled="False" group="" log="False" position="1" action="Accept" direction="Both" comment="">
@@ -4326,7 +4326,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id3DE69487" disabled="False" group="" log="True" position="2" action="Deny" direction="Both" comment="">
@@ -4346,7 +4346,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -4374,19 +4374,19 @@
           <Option name="action_on_reject">ICMP net unreachable</Option>
           <Option name="check_shading">True</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
-          <Option name="cmdline"/>
-          <Option name="compiler"/>
+          <Option name="cmdline"></Option>
+          <Option name="compiler"></Option>
           <Option name="configure_interfaces">False</Option>
           <Option name="debug">False</Option>
           <Option name="dyn_addr">False</Option>
-          <Option name="firewall_dir"/>
+          <Option name="firewall_dir"></Option>
           <Option name="firewall_is_part_of_any">True</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="ignore_empty_groups">True</Option>
           <Option name="in_out_code">True</Option>
-          <Option name="inst_cmdline"/>
-          <Option name="inst_script"/>
-          <Option name="install_script"/>
+          <Option name="inst_cmdline"></Option>
+          <Option name="inst_script"></Option>
+          <Option name="install_script"></Option>
           <Option name="limit_suffix">/second</Option>
           <Option name="limit_value">0</Option>
           <Option name="linux24_ip_forward">0</Option>
@@ -4398,7 +4398,7 @@
           <Option name="log_level">debug</Option>
           <Option name="log_limit_suffix">/second</Option>
           <Option name="log_limit_value">0</Option>
-          <Option name="log_prefix"/>
+          <Option name="log_prefix"></Option>
           <Option name="log_tcp_opt">False</Option>
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">True</Option>
@@ -4409,13 +4409,13 @@
           <Option name="openbsd_ip_forward">1</Option>
           <Option name="openbsd_ip_redirect">0</Option>
           <Option name="openbsd_ip_sourceroute">0</Option>
-          <Option name="openbsd_path_pfctl"/>
-          <Option name="openbsd_path_sysctl"/>
+          <Option name="openbsd_path_pfctl"></Option>
+          <Option name="openbsd_path_sysctl"></Option>
           <Option name="pass_all_out">False</Option>
           <Option name="pf_do_scrub">True</Option>
           <Option name="pf_limit_frags">5000</Option>
           <Option name="pf_limit_states">10000</Option>
-          <Option name="pf_optimization"/>
+          <Option name="pf_optimization"></Option>
           <Option name="pf_scrub_fragm_crop">False</Option>
           <Option name="pf_scrub_fragm_drop_ovl">False</Option>
           <Option name="pf_scrub_maxmss">1460</Option>
@@ -4427,10 +4427,10 @@
           <Option name="pf_timeout_frag">30</Option>
           <Option name="pf_timeout_interval">10</Option>
           <Option name="platform">iptables</Option>
-          <Option name="script_env_path"/>
-          <Option name="snmp_contact"/>
-          <Option name="snmp_description"/>
-          <Option name="snmp_location"/>
+          <Option name="script_env_path"></Option>
+          <Option name="snmp_contact"></Option>
+          <Option name="snmp_description"></Option>
+          <Option name="snmp_location"></Option>
           <Option name="use_numeric_log_levels">False</Option>
           <Option name="use_tables">True</Option>
         </FirewallOptions>
@@ -4464,7 +4464,7 @@
             </ItfOutb>
             <NATRuleOptions>
               <Option name="color">#C0BA44</Option>
-              <Option name="id"/>
+              <Option name="id"></Option>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id3AFB66D6" disabled="False" group="" position="1" action="Translate" comment="">
@@ -4495,7 +4495,7 @@
             </ItfOutb>
             <NATRuleOptions>
               <Option name="color">#C0BA44</Option>
-              <Option name="id"/>
+              <Option name="id"></Option>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id3CABE6DF" disabled="False" group="" position="2" action="Translate" comment="">
@@ -4555,7 +4555,7 @@
             </ItfOutb>
             <NATRuleOptions>
               <Option name="color">#C0BA44</Option>
-              <Option name="id"/>
+              <Option name="id"></Option>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id40E9A83B" disabled="False" group="" position="4" action="Translate" comment="">
@@ -4586,7 +4586,7 @@
             </ItfOutb>
             <NATRuleOptions>
               <Option name="color">#C0BA44</Option>
-              <Option name="id"/>
+              <Option name="id"></Option>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id40E9A850" disabled="False" group="" position="5" action="Translate" comment="">
@@ -4646,7 +4646,7 @@
             </ItfOutb>
             <NATRuleOptions>
               <Option name="color">#C0BA44</Option>
-              <Option name="id"/>
+              <Option name="id"></Option>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id40E9A8F2" disabled="False" group="" position="7" action="Translate" comment="">
@@ -4677,7 +4677,7 @@
             </ItfOutb>
             <NATRuleOptions>
               <Option name="color">#C0BA44</Option>
-              <Option name="id"/>
+              <Option name="id"></Option>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id40E9A907" disabled="False" group="" position="8" action="Translate" comment="">
@@ -4818,7 +4818,7 @@
               <ObjectRef ref="sysid0"/>
             </ItfOutb>
             <NATRuleOptions>
-              <Option name="id"/>
+              <Option name="id"></Option>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id3BD6757E" disabled="True" group="" position="13" action="Translate" comment="">
@@ -5530,7 +5530,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -5549,11 +5549,11 @@
               <ObjectRef ref="id3AFB6706"/>
             </Itf>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
-              <Option name="limit_suffix"/>
+              <Option name="action_on_reject"></Option>
+              <Option name="limit_suffix"></Option>
               <Option name="limit_value">0</Option>
               <Option name="log_prefix">Iface: %I RULE %N -- %A **</Option>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -5575,11 +5575,11 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
-              <Option name="limit_suffix"/>
+              <Option name="action_on_reject"></Option>
+              <Option name="limit_suffix"></Option>
               <Option name="limit_value">0</Option>
               <Option name="log_prefix">Iface: %I RULE %N -- %A **</Option>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -5602,11 +5602,11 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
-              <Option name="limit_suffix"/>
+              <Option name="action_on_reject"></Option>
+              <Option name="limit_suffix"></Option>
               <Option name="limit_value">0</Option>
               <Option name="log_prefix">Iface: %I RULE %N -- %A **</Option>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -5629,11 +5629,11 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
-              <Option name="limit_suffix"/>
+              <Option name="action_on_reject"></Option>
+              <Option name="limit_suffix"></Option>
               <Option name="limit_value">0</Option>
               <Option name="log_prefix">Iface: %I RULE %N -- %A **</Option>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -5652,11 +5652,11 @@
               <ObjectRef ref="id3AFB6706"/>
             </Itf>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
-              <Option name="limit_suffix"/>
+              <Option name="action_on_reject"></Option>
+              <Option name="limit_suffix"></Option>
               <Option name="limit_value">0</Option>
               <Option name="log_prefix">Iface: %I RULE %N -- %A **</Option>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -5677,8 +5677,8 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="id"/>
-              <Option name="pf_classify_str"/>
+              <Option name="id"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -5700,10 +5700,10 @@
             </When>
             <PolicyRuleOptions>
               <Option name="action_on_reject">TCP RST</Option>
-              <Option name="limit_suffix"/>
+              <Option name="limit_suffix"></Option>
               <Option name="limit_value">0</Option>
               <Option name="log_prefix">IDENT</Option>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -5725,7 +5725,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id3D8FEE11" disabled="False" group="" log="False" position="9" action="Accept" direction="Both" comment="">
@@ -5746,7 +5746,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id3AFB66EF" disabled="False" group="" log="False" position="10" action="Accept" direction="Both" comment="'masquerading' rule">
@@ -5766,8 +5766,8 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="id"/>
-              <Option name="pf_classify_str"/>
+              <Option name="id"></Option>
+              <Option name="pf_classify_str"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id3C447B8D" disabled="True" group="" log="True" position="11" action="Accept" direction="Both" comment="host-fw2 has the same address as &#10;        one of the firewall's interfaces">
@@ -5787,7 +5787,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id3C447BCB" disabled="False" group="" log="False" position="12" action="Accept" direction="Both" comment="">
@@ -5810,7 +5810,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id3AFB66F9" disabled="False" group="" log="True" position="13" action="Deny" direction="Both" comment="'catch all' rule">
@@ -5830,8 +5830,8 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="id"/>
-              <Option name="pf_classify_str"/>
+              <Option name="id"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -5874,31 +5874,31 @@
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
           <Option name="action_on_reject">ICMP net unreachable</Option>
-          <Option name="activationCmd"/>
-          <Option name="admUser"/>
-          <Option name="altAddress"/>
+          <Option name="activationCmd"></Option>
+          <Option name="admUser"></Option>
+          <Option name="altAddress"></Option>
           <Option name="check_shading">False</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
-          <Option name="cmdline"/>
-          <Option name="compiler"/>
-          <Option name="conf_file_name_on_firewall"/>
+          <Option name="cmdline"></Option>
+          <Option name="compiler"></Option>
+          <Option name="conf_file_name_on_firewall"></Option>
           <Option name="configure_carp_interfaces">False</Option>
           <Option name="configure_interfaces">False</Option>
           <Option name="configure_pfsync_interfaces">False</Option>
           <Option name="configure_vlan_interfaces">False</Option>
           <Option name="debug">False</Option>
           <Option name="dyn_addr">False</Option>
-          <Option name="epilog_script"/>
+          <Option name="epilog_script"></Option>
           <Option name="fallback_log">False</Option>
-          <Option name="firewall_dir"/>
+          <Option name="firewall_dir"></Option>
           <Option name="firewall_is_part_of_any">True</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
-          <Option name="id"/>
+          <Option name="id"></Option>
           <Option name="ignore_empty_groups">False</Option>
           <Option name="in_out_code">True</Option>
-          <Option name="inst_cmdline"/>
-          <Option name="inst_script"/>
-          <Option name="install_script"/>
+          <Option name="inst_cmdline"></Option>
+          <Option name="inst_script"></Option>
+          <Option name="install_script"></Option>
           <Option name="ipv4_6_order">ipv4_first</Option>
           <Option name="limit_suffix">/second</Option>
           <Option name="limit_value">0</Option>
@@ -5926,9 +5926,9 @@
           <Option name="modulate_state">False</Option>
           <Option name="no_iochains_for_any">False</Option>
           <Option name="no_optimisation">False</Option>
-          <Option name="openbsd_path_pfctl"/>
-          <Option name="openbsd_path_sysctl"/>
-          <Option name="output_file"/>
+          <Option name="openbsd_path_pfctl"></Option>
+          <Option name="openbsd_path_sysctl"></Option>
+          <Option name="output_file"></Option>
           <Option name="pass_all_out">False</Option>
           <Option name="pf_adaptive_end">0</Option>
           <Option name="pf_adaptive_start">0</Option>
@@ -5977,7 +5977,7 @@
           <Option name="pf_set_udp_first">False</Option>
           <Option name="pf_set_udp_multiple">False</Option>
           <Option name="pf_set_udp_single">False</Option>
-          <Option name="pf_state_policy"/>
+          <Option name="pf_state_policy"></Option>
           <Option name="pf_tcp_closed">0</Option>
           <Option name="pf_tcp_closing">0</Option>
           <Option name="pf_tcp_established">10</Option>
@@ -5995,13 +5995,13 @@
 # prolog commands go after set commands
 </Option>
           <Option name="proxy_arp">True</Option>
-          <Option name="scpArgs"/>
-          <Option name="script_env_path"/>
-          <Option name="script_name_on_firewall"/>
-          <Option name="snmp_contact"/>
-          <Option name="snmp_description"/>
-          <Option name="snmp_location"/>
-          <Option name="sshArgs"/>
+          <Option name="scpArgs"></Option>
+          <Option name="script_env_path"></Option>
+          <Option name="script_name_on_firewall"></Option>
+          <Option name="snmp_contact"></Option>
+          <Option name="snmp_description"></Option>
+          <Option name="snmp_location"></Option>
+          <Option name="sshArgs"></Option>
           <Option name="use_ip_tool">True</Option>
           <Option name="use_numeric_log_levels">False</Option>
           <Option name="use_tables">True</Option>
@@ -6035,7 +6035,7 @@
               <ObjectRef ref="sysid0"/>
             </ItfOutb>
             <NATRuleOptions>
-              <Option name="id"/>
+              <Option name="id"></Option>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id3B0C6390" disabled="False" group="" position="1" action="Translate" comment="">
@@ -6064,7 +6064,7 @@
               <ObjectRef ref="sysid0"/>
             </ItfOutb>
             <NATRuleOptions>
-              <Option name="id"/>
+              <Option name="id"></Option>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id3B202AFF" disabled="False" group="" position="2" action="Translate" comment="">
@@ -6195,29 +6195,29 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
+              <Option name="action_on_reject"></Option>
               <Option name="branch_id">id16046X49036</Option>
-              <Option name="classify_str"/>
-              <Option name="custom_str"/>
-              <Option name="ipf_route_opt_addr"/>
-              <Option name="ipf_route_opt_if"/>
+              <Option name="classify_str"></Option>
+              <Option name="custom_str"></Option>
+              <Option name="ipf_route_opt_addr"></Option>
+              <Option name="ipf_route_opt_if"></Option>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"/>
-              <Option name="ipt_iif"/>
+              <Option name="ipt_gw"></Option>
+              <Option name="ipt_iif"></Option>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"/>
+              <Option name="ipt_oif"></Option>
               <Option name="ipt_tee">False</Option>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"/>
-              <Option name="pf_route_opt_if"/>
+              <Option name="pf_route_opt_addr"></Option>
+              <Option name="pf_route_opt_if"></Option>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"/>
+              <Option name="rule_name_accounting"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -6238,7 +6238,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -6256,7 +6256,7 @@
               <ObjectRef ref="id3B0C63E1"/>
             </Itf>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -6275,7 +6275,7 @@
               <ObjectRef ref="id3B0C63E1"/>
             </Itf>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -6294,7 +6294,7 @@
               <ObjectRef ref="id3B0C63E1"/>
             </Itf>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -6315,8 +6315,8 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="id"/>
-              <Option name="pf_classify_str"/>
+              <Option name="id"></Option>
+              <Option name="pf_classify_str"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id3B0C63B4" disabled="False" group="" log="True" position="6" action="Deny" direction="Both" comment="">
@@ -6337,8 +6337,8 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="id"/>
-              <Option name="pf_classify_str"/>
+              <Option name="id"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -6360,8 +6360,8 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="id"/>
-              <Option name="pf_classify_str"/>
+              <Option name="id"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -6384,8 +6384,8 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="id"/>
-              <Option name="pf_classify_str"/>
+              <Option name="id"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -6406,8 +6406,8 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="id"/>
-              <Option name="pf_classify_str"/>
+              <Option name="id"></Option>
+              <Option name="pf_classify_str"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id3B0C63D5" disabled="False" group="" log="True" position="10" action="Deny" direction="Both" comment="'catch all' rule">
@@ -6427,8 +6427,8 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="id"/>
-              <Option name="pf_classify_str"/>
+              <Option name="id"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -6469,13 +6469,13 @@
           <Option name="accept_established">False</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
           <Option name="action_on_reject">ICMP net unreachable</Option>
-          <Option name="activationCmd"/>
-          <Option name="admUser"/>
-          <Option name="altAddress"/>
+          <Option name="activationCmd"></Option>
+          <Option name="admUser"></Option>
+          <Option name="altAddress"></Option>
           <Option name="check_shading">True</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
           <Option name="cmdline">-xt</Option>
-          <Option name="compiler"/>
+          <Option name="compiler"></Option>
           <Option name="conf_file_name_on_firewall">/etc/fw/pf.conf</Option>
           <Option name="configure_carp_interfaces">False</Option>
           <Option name="configure_interfaces">False</Option>
@@ -6483,18 +6483,18 @@
           <Option name="configure_vlan_interfaces">False</Option>
           <Option name="debug">False</Option>
           <Option name="dyn_addr">False</Option>
-          <Option name="epilog_script"/>
+          <Option name="epilog_script"></Option>
           <Option name="fallback_log">False</Option>
-          <Option name="firewall_dir"/>
+          <Option name="firewall_dir"></Option>
           <Option name="firewall_is_part_of_any">True</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
-          <Option name="id"/>
+          <Option name="id"></Option>
           <Option name="ignore_empty_groups">False</Option>
           <Option name="in_out_code">True</Option>
-          <Option name="inst_cmdline"/>
-          <Option name="inst_script"/>
-          <Option name="install_script"/>
-          <Option name="ipt_mangle_only_rulesets"/>
+          <Option name="inst_cmdline"></Option>
+          <Option name="inst_script"></Option>
+          <Option name="install_script"></Option>
+          <Option name="ipt_mangle_only_rulesets"></Option>
           <Option name="ipv4_6_order">ipv4_first</Option>
           <Option name="limit_suffix">/day</Option>
           <Option name="limit_value">0</Option>
@@ -6507,18 +6507,18 @@
           <Option name="log_level">debug</Option>
           <Option name="log_limit_suffix">/second</Option>
           <Option name="log_limit_value">0</Option>
-          <Option name="log_prefix"/>
+          <Option name="log_prefix"></Option>
           <Option name="log_tcp_opt">False</Option>
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"/>
+          <Option name="mgmt_addr"></Option>
           <Option name="mgmt_ssh">False</Option>
           <Option name="modulate_state">False</Option>
           <Option name="no_iochains_for_any">False</Option>
           <Option name="no_optimisation">False</Option>
-          <Option name="openbsd_path_pfctl"/>
-          <Option name="openbsd_path_sysctl"/>
-          <Option name="output_file"/>
+          <Option name="openbsd_path_pfctl"></Option>
+          <Option name="openbsd_path_sysctl"></Option>
+          <Option name="output_file"></Option>
           <Option name="pass_all_out">False</Option>
           <Option name="pf_adaptive_end">0</Option>
           <Option name="pf_adaptive_start">0</Option>
@@ -6567,7 +6567,7 @@
           <Option name="pf_set_udp_first">False</Option>
           <Option name="pf_set_udp_multiple">False</Option>
           <Option name="pf_set_udp_single">False</Option>
-          <Option name="pf_state_policy"/>
+          <Option name="pf_state_policy"></Option>
           <Option name="pf_tcp_closed">0</Option>
           <Option name="pf_tcp_closing">0</Option>
           <Option name="pf_tcp_established">0</Option>
@@ -6584,13 +6584,13 @@
           <Option name="prolog_script"># prolog commands go after table definitions
 </Option>
           <Option name="proxy_arp">False</Option>
-          <Option name="scpArgs"/>
-          <Option name="script_env_path"/>
+          <Option name="scpArgs"></Option>
+          <Option name="script_env_path"></Option>
           <Option name="script_name_on_firewall">pf.fw</Option>
-          <Option name="snmp_contact"/>
-          <Option name="snmp_description"/>
-          <Option name="snmp_location"/>
-          <Option name="sshArgs"/>
+          <Option name="snmp_contact"></Option>
+          <Option name="snmp_description"></Option>
+          <Option name="snmp_location"></Option>
+          <Option name="sshArgs"></Option>
           <Option name="use_numeric_log_levels">False</Option>
           <Option name="use_tables">False</Option>
         </FirewallOptions>
@@ -6645,11 +6645,11 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
+              <Option name="action_on_reject"></Option>
               <Option name="limit_value">0</Option>
-              <Option name="log_limit_suffix"/>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_limit_suffix"></Option>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -6671,11 +6671,11 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
+              <Option name="action_on_reject"></Option>
               <Option name="limit_value">0</Option>
-              <Option name="log_limit_suffix"/>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_limit_suffix"></Option>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -6696,7 +6696,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -6726,30 +6726,30 @@
           <Option name="accept_established">False</Option>
           <Option name="accept_new_tcp_with_no_syn">False</Option>
           <Option name="action_on_reject">ICMP net unreachable</Option>
-          <Option name="activationCmd"/>
-          <Option name="admUser"/>
-          <Option name="altAddress"/>
+          <Option name="activationCmd"></Option>
+          <Option name="admUser"></Option>
+          <Option name="altAddress"></Option>
           <Option name="check_shading">False</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
-          <Option name="cmdline"/>
-          <Option name="compiler"/>
-          <Option name="conf_file_name_on_firewall"/>
+          <Option name="cmdline"></Option>
+          <Option name="compiler"></Option>
+          <Option name="conf_file_name_on_firewall"></Option>
           <Option name="configure_carp_interfaces">False</Option>
           <Option name="configure_interfaces">False</Option>
           <Option name="configure_pfsync_interfaces">False</Option>
           <Option name="configure_vlan_interfaces">False</Option>
           <Option name="debug">False</Option>
           <Option name="dyn_addr">False</Option>
-          <Option name="epilog_script"/>
+          <Option name="epilog_script"></Option>
           <Option name="fallback_log">False</Option>
-          <Option name="firewall_dir"/>
+          <Option name="firewall_dir"></Option>
           <Option name="firewall_is_part_of_any">True</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="ignore_empty_groups">True</Option>
           <Option name="in_out_code">True</Option>
-          <Option name="inst_cmdline"/>
-          <Option name="inst_script"/>
-          <Option name="install_script"/>
+          <Option name="inst_cmdline"></Option>
+          <Option name="inst_script"></Option>
+          <Option name="install_script"></Option>
           <Option name="ipv4_6_order">ipv4_first</Option>
           <Option name="limit_suffix">/second</Option>
           <Option name="limit_value">0</Option>
@@ -6762,11 +6762,11 @@
           <Option name="log_level">debug</Option>
           <Option name="log_limit_suffix">/second</Option>
           <Option name="log_limit_value">0</Option>
-          <Option name="log_prefix"/>
+          <Option name="log_prefix"></Option>
           <Option name="log_tcp_opt">False</Option>
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"/>
+          <Option name="mgmt_addr"></Option>
           <Option name="mgmt_ssh">False</Option>
           <Option name="modulate_state">True</Option>
           <Option name="no_iochains_for_any">False</Option>
@@ -6775,9 +6775,9 @@
           <Option name="openbsd_ip_forward">1</Option>
           <Option name="openbsd_ip_redirect">0</Option>
           <Option name="openbsd_ip_sourceroute">0</Option>
-          <Option name="openbsd_path_pfctl"/>
-          <Option name="openbsd_path_sysctl"/>
-          <Option name="output_file"/>
+          <Option name="openbsd_path_pfctl"></Option>
+          <Option name="openbsd_path_sysctl"></Option>
+          <Option name="output_file"></Option>
           <Option name="pass_all_out">False</Option>
           <Option name="pf_adaptive_end">0</Option>
           <Option name="pf_adaptive_start">0</Option>
@@ -6826,7 +6826,7 @@
           <Option name="pf_set_udp_first">False</Option>
           <Option name="pf_set_udp_multiple">False</Option>
           <Option name="pf_set_udp_single">False</Option>
-          <Option name="pf_state_policy"/>
+          <Option name="pf_state_policy"></Option>
           <Option name="pf_tcp_closed">0</Option>
           <Option name="pf_tcp_closing">0</Option>
           <Option name="pf_tcp_established">0</Option>
@@ -6840,14 +6840,14 @@
           <Option name="pf_udp_single">0</Option>
           <Option name="platform">iptables</Option>
           <Option name="prolog_place">fw_file</Option>
-          <Option name="prolog_script"/>
-          <Option name="scpArgs"/>
-          <Option name="script_env_path"/>
-          <Option name="script_name_on_firewall"/>
-          <Option name="snmp_contact"/>
-          <Option name="snmp_description"/>
-          <Option name="snmp_location"/>
-          <Option name="sshArgs"/>
+          <Option name="prolog_script"></Option>
+          <Option name="scpArgs"></Option>
+          <Option name="script_env_path"></Option>
+          <Option name="script_name_on_firewall"></Option>
+          <Option name="snmp_contact"></Option>
+          <Option name="snmp_description"></Option>
+          <Option name="snmp_location"></Option>
+          <Option name="sshArgs"></Option>
           <Option name="use_numeric_log_levels">False</Option>
           <Option name="use_tables">True</Option>
         </FirewallOptions>
@@ -6871,7 +6871,7 @@
               <ObjectRef ref="id3C69901D"/>
             </Itf>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -6892,7 +6892,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -6932,19 +6932,19 @@
           <Option name="action_on_reject">ICMP net unreachable</Option>
           <Option name="check_shading">True</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
-          <Option name="cmdline"/>
-          <Option name="compiler"/>
+          <Option name="cmdline"></Option>
+          <Option name="compiler"></Option>
           <Option name="configure_interfaces">False</Option>
           <Option name="debug">False</Option>
           <Option name="dyn_addr">False</Option>
-          <Option name="firewall_dir"/>
+          <Option name="firewall_dir"></Option>
           <Option name="firewall_is_part_of_any">True</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="ignore_empty_groups">False</Option>
           <Option name="in_out_code">True</Option>
-          <Option name="inst_cmdline"/>
-          <Option name="inst_script"/>
-          <Option name="install_script"/>
+          <Option name="inst_cmdline"></Option>
+          <Option name="inst_script"></Option>
+          <Option name="install_script"></Option>
           <Option name="limit_suffix">/day</Option>
           <Option name="limit_value">0</Option>
           <Option name="linux24_ip_forward">0</Option>
@@ -6956,20 +6956,20 @@
           <Option name="log_level">debug</Option>
           <Option name="log_limit_suffix">/second</Option>
           <Option name="log_limit_value">0</Option>
-          <Option name="log_prefix"/>
+          <Option name="log_prefix"></Option>
           <Option name="log_tcp_opt">False</Option>
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">True</Option>
           <Option name="modulate_state">False</Option>
           <Option name="no_iochains_for_any">False</Option>
           <Option name="no_optimisation">False</Option>
-          <Option name="openbsd_path_pfctl"/>
-          <Option name="openbsd_path_sysctl"/>
+          <Option name="openbsd_path_pfctl"></Option>
+          <Option name="openbsd_path_sysctl"></Option>
           <Option name="pass_all_out">False</Option>
           <Option name="pf_do_scrub">True</Option>
           <Option name="pf_limit_frags">5000</Option>
           <Option name="pf_limit_states">10000</Option>
-          <Option name="pf_optimization"/>
+          <Option name="pf_optimization"></Option>
           <Option name="pf_scrub_fragm_crop">False</Option>
           <Option name="pf_scrub_fragm_drop_ovl">False</Option>
           <Option name="pf_scrub_maxmss">1460</Option>
@@ -6982,10 +6982,10 @@
           <Option name="pf_timeout_interval">10</Option>
           <Option name="platform">iptables</Option>
           <Option name="proxy_arp">False</Option>
-          <Option name="script_env_path"/>
-          <Option name="snmp_contact"/>
-          <Option name="snmp_description"/>
-          <Option name="snmp_location"/>
+          <Option name="script_env_path"></Option>
+          <Option name="snmp_contact"></Option>
+          <Option name="snmp_description"></Option>
+          <Option name="snmp_location"></Option>
           <Option name="use_ip_tool">False</Option>
           <Option name="use_numeric_log_levels">False</Option>
           <Option name="use_tables">True</Option>
@@ -7013,7 +7013,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -7034,7 +7034,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <RuleSetOptions/>
@@ -7073,19 +7073,19 @@
           <Option name="action_on_reject">ICMP net unreachable</Option>
           <Option name="check_shading">True</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
-          <Option name="cmdline"/>
-          <Option name="compiler"/>
+          <Option name="cmdline"></Option>
+          <Option name="compiler"></Option>
           <Option name="configure_interfaces">False</Option>
           <Option name="debug">False</Option>
           <Option name="dyn_addr">False</Option>
-          <Option name="firewall_dir"/>
+          <Option name="firewall_dir"></Option>
           <Option name="firewall_is_part_of_any">True</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="ignore_empty_groups">False</Option>
           <Option name="in_out_code">True</Option>
-          <Option name="inst_cmdline"/>
-          <Option name="inst_script"/>
-          <Option name="install_script"/>
+          <Option name="inst_cmdline"></Option>
+          <Option name="inst_script"></Option>
+          <Option name="install_script"></Option>
           <Option name="limit_suffix">/day</Option>
           <Option name="limit_value">0</Option>
           <Option name="linux24_ip_forward">0</Option>
@@ -7097,20 +7097,20 @@
           <Option name="log_level">debug</Option>
           <Option name="log_limit_suffix">/second</Option>
           <Option name="log_limit_value">0</Option>
-          <Option name="log_prefix"/>
+          <Option name="log_prefix"></Option>
           <Option name="log_tcp_opt">False</Option>
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">True</Option>
           <Option name="modulate_state">False</Option>
           <Option name="no_iochains_for_any">False</Option>
           <Option name="no_optimisation">False</Option>
-          <Option name="openbsd_path_pfctl"/>
-          <Option name="openbsd_path_sysctl"/>
+          <Option name="openbsd_path_pfctl"></Option>
+          <Option name="openbsd_path_sysctl"></Option>
           <Option name="pass_all_out">False</Option>
           <Option name="pf_do_scrub">True</Option>
           <Option name="pf_limit_frags">5000</Option>
           <Option name="pf_limit_states">10000</Option>
-          <Option name="pf_optimization"/>
+          <Option name="pf_optimization"></Option>
           <Option name="pf_scrub_fragm_crop">False</Option>
           <Option name="pf_scrub_fragm_drop_ovl">False</Option>
           <Option name="pf_scrub_maxmss">1460</Option>
@@ -7123,10 +7123,10 @@
           <Option name="pf_timeout_interval">10</Option>
           <Option name="platform">iptables</Option>
           <Option name="proxy_arp">False</Option>
-          <Option name="script_env_path"/>
-          <Option name="snmp_contact"/>
-          <Option name="snmp_description"/>
-          <Option name="snmp_location"/>
+          <Option name="script_env_path"></Option>
+          <Option name="snmp_contact"></Option>
+          <Option name="snmp_description"></Option>
+          <Option name="snmp_location"></Option>
           <Option name="use_ip_tool">False</Option>
           <Option name="use_numeric_log_levels">False</Option>
           <Option name="use_tables">True</Option>
@@ -7397,7 +7397,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -7418,7 +7418,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -7439,7 +7439,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id3D58119B" disabled="False" group="" log="False" position="3" action="Accept" direction="Both" comment="">
@@ -7459,7 +7459,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id3D5811FB" disabled="False" group="" log="False" position="4" action="Accept" direction="Both" comment="">
@@ -7479,7 +7479,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id3D5811B1" disabled="False" group="" log="True" position="5" action="Deny" direction="Both" comment="">
@@ -7499,7 +7499,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -7531,14 +7531,14 @@
         </Management>
         <FirewallOptions>
           <Option name="check_shading">False</Option>
-          <Option name="cmdline"/>
-          <Option name="compiler"/>
+          <Option name="cmdline"></Option>
+          <Option name="compiler"></Option>
           <Option name="configure_interfaces">False</Option>
           <Option name="debug">False</Option>
           <Option name="firewall_dir">/etc</Option>
           <Option name="ignore_empty_groups">False</Option>
           <Option name="in_out_code">True</Option>
-          <Option name="log_prefix"/>
+          <Option name="log_prefix"></Option>
           <Option name="manage_virtual_addr">False</Option>
           <Option name="modulate_state">False</Option>
           <Option name="no_optimisation">False</Option>
@@ -7549,7 +7549,7 @@
           <Option name="pf_do_scrub">True</Option>
           <Option name="pf_limit_frags">5000</Option>
           <Option name="pf_limit_states">10000</Option>
-          <Option name="pf_optimization"/>
+          <Option name="pf_optimization"></Option>
           <Option name="pf_scrub_fragm_crop">False</Option>
           <Option name="pf_scrub_fragm_drop_ovl">False</Option>
           <Option name="pf_scrub_maxmss">1460</Option>
@@ -7560,9 +7560,9 @@
           <Option name="pf_scrub_use_minttl">False</Option>
           <Option name="pf_timeout_frag">30</Option>
           <Option name="pf_timeout_interval">10</Option>
-          <Option name="snmp_contact"/>
-          <Option name="snmp_description"/>
-          <Option name="snmp_location"/>
+          <Option name="snmp_contact"></Option>
+          <Option name="snmp_description"></Option>
+          <Option name="snmp_location"></Option>
           <Option name="use_tables">True</Option>
         </FirewallOptions>
       </Firewall>
@@ -7642,7 +7642,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -7663,7 +7663,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id3E853D1B" disabled="True" group="" log="False" position="2" action="Accept" direction="Both" comment="">
@@ -7683,7 +7683,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id3E853CC1" disabled="False" group="" log="False" position="3" action="Accept" direction="Both" comment="">
@@ -7703,7 +7703,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id3E853D26" disabled="False" group="" log="True" position="4" action="Deny" direction="Both" comment="">
@@ -7723,7 +7723,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -7754,27 +7754,27 @@
           <Option name="action_on_reject">ICMP net unreachable</Option>
           <Option name="check_shading">True</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
-          <Option name="cmdline"/>
-          <Option name="compiler"/>
+          <Option name="cmdline"></Option>
+          <Option name="compiler"></Option>
           <Option name="configure_interfaces">False</Option>
           <Option name="debug">False</Option>
           <Option name="dyn_addr">False</Option>
-          <Option name="firewall_dir"/>
+          <Option name="firewall_dir"></Option>
           <Option name="firewall_is_part_of_any">True</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
-          <Option name="freebsd_ip_forward"/>
-          <Option name="freebsd_ip_redirect"/>
-          <Option name="freebsd_ip_sourceroute"/>
-          <Option name="freebsd_ipv6_forward"/>
-          <Option name="freebsd_path_ipf"/>
-          <Option name="freebsd_path_ipnat"/>
+          <Option name="freebsd_ip_forward"></Option>
+          <Option name="freebsd_ip_redirect"></Option>
+          <Option name="freebsd_ip_sourceroute"></Option>
+          <Option name="freebsd_ipv6_forward"></Option>
+          <Option name="freebsd_path_ipf"></Option>
+          <Option name="freebsd_path_ipnat"></Option>
           <Option name="freebsd_path_pfctl">/usr/local/bin/pfctl</Option>
-          <Option name="freebsd_path_sysctl"/>
+          <Option name="freebsd_path_sysctl"></Option>
           <Option name="ignore_empty_groups">False</Option>
           <Option name="in_out_code">True</Option>
-          <Option name="inst_cmdline"/>
-          <Option name="inst_script"/>
-          <Option name="install_script"/>
+          <Option name="inst_cmdline"></Option>
+          <Option name="inst_script"></Option>
+          <Option name="install_script"></Option>
           <Option name="limit_suffix">/day</Option>
           <Option name="limit_value">0</Option>
           <Option name="linux24_ip_forward">0</Option>
@@ -7786,20 +7786,20 @@
           <Option name="log_level">debug</Option>
           <Option name="log_limit_suffix">/second</Option>
           <Option name="log_limit_value">0</Option>
-          <Option name="log_prefix"/>
+          <Option name="log_prefix"></Option>
           <Option name="log_tcp_opt">False</Option>
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">True</Option>
           <Option name="modulate_state">False</Option>
           <Option name="no_iochains_for_any">False</Option>
           <Option name="no_optimisation">False</Option>
-          <Option name="openbsd_path_pfctl"/>
-          <Option name="openbsd_path_sysctl"/>
+          <Option name="openbsd_path_pfctl"></Option>
+          <Option name="openbsd_path_sysctl"></Option>
           <Option name="pass_all_out">False</Option>
           <Option name="pf_do_scrub">True</Option>
           <Option name="pf_limit_frags">5000</Option>
           <Option name="pf_limit_states">10000</Option>
-          <Option name="pf_optimization"/>
+          <Option name="pf_optimization"></Option>
           <Option name="pf_scrub_fragm_crop">False</Option>
           <Option name="pf_scrub_fragm_drop_ovl">False</Option>
           <Option name="pf_scrub_maxmss">1460</Option>
@@ -7812,10 +7812,10 @@
           <Option name="pf_timeout_interval">10</Option>
           <Option name="platform">iptables</Option>
           <Option name="proxy_arp">False</Option>
-          <Option name="script_env_path"/>
-          <Option name="snmp_contact"/>
-          <Option name="snmp_description"/>
-          <Option name="snmp_location"/>
+          <Option name="script_env_path"></Option>
+          <Option name="snmp_contact"></Option>
+          <Option name="snmp_description"></Option>
+          <Option name="snmp_location"></Option>
           <Option name="use_ip_tool">False</Option>
           <Option name="use_numeric_log_levels">False</Option>
           <Option name="use_tables">True</Option>
@@ -7953,7 +7953,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id43869E9018346" disabled="False" group="" log="False" position="1" action="Accept" direction="Both" comment="">
@@ -7973,7 +7973,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id43869E9E18346" disabled="False" group="" log="False" position="2" action="Accept" direction="Both" comment="">
@@ -7993,7 +7993,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id43869EAA18346" disabled="False" group="" log="False" position="3" action="Accept" direction="Both" comment="">
@@ -8013,7 +8013,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id4386E38318346" disabled="False" group="" log="False" position="4" action="Deny" direction="Both" comment="">
@@ -8033,7 +8033,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -8054,7 +8054,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -8075,7 +8075,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id4386C10D18346" disabled="False" group="" log="False" position="7" action="Accept" direction="Both" comment="">
@@ -8095,7 +8095,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id438728A918346" disabled="False" group="" log="False" position="8" action="Accept" direction="Both" comment="">
@@ -8116,7 +8116,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id438728BA18346" disabled="False" group="" log="False" position="9" action="Accept" direction="Both" comment="">
@@ -8137,7 +8137,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id438728CD18346" disabled="False" group="" log="False" position="10" action="Accept" direction="Both" comment="">
@@ -8158,7 +8158,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id43867C3C18346" disabled="False" group="" log="True" position="11" action="Deny" direction="Both" comment="">
@@ -8178,7 +8178,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -8207,50 +8207,50 @@
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
           <Option name="action_on_reject">ICMP net unreachable</Option>
-          <Option name="activationCmd"/>
-          <Option name="admUser"/>
-          <Option name="altAddress"/>
+          <Option name="activationCmd"></Option>
+          <Option name="admUser"></Option>
+          <Option name="altAddress"></Option>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">False</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
-          <Option name="cmdline"/>
-          <Option name="compiler"/>
+          <Option name="cmdline"></Option>
+          <Option name="compiler"></Option>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="drop_invalid">False</Option>
           <Option name="dyn_addr">False</Option>
-          <Option name="epilog_script"/>
-          <Option name="firewall_dir"/>
+          <Option name="epilog_script"></Option>
+          <Option name="firewall_dir"></Option>
           <Option name="firewall_is_part_of_any">True</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="ignore_empty_groups">False</Option>
-          <Option name="inst_cmdline"/>
-          <Option name="inst_script"/>
-          <Option name="install_script"/>
+          <Option name="inst_cmdline"></Option>
+          <Option name="inst_script"></Option>
+          <Option name="install_script"></Option>
           <Option name="limit_suffix">/day</Option>
           <Option name="limit_value">0</Option>
-          <Option name="linux24_accept_redirects"/>
-          <Option name="linux24_accept_source_route"/>
-          <Option name="linux24_icmp_echo_ignore_all"/>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
-          <Option name="linux24_icmp_ignore_bogus_error_responses"/>
-          <Option name="linux24_ip_dynaddr"/>
-          <Option name="linux24_ip_forward"/>
-          <Option name="linux24_log_martians"/>
-          <Option name="linux24_path_ip"/>
-          <Option name="linux24_path_iptables"/>
-          <Option name="linux24_path_logger"/>
-          <Option name="linux24_path_lsmod"/>
-          <Option name="linux24_path_modprobe"/>
-          <Option name="linux24_rp_filter"/>
-          <Option name="linux24_tcp_ecn"/>
-          <Option name="linux24_tcp_fack"/>
+          <Option name="linux24_accept_redirects"></Option>
+          <Option name="linux24_accept_source_route"></Option>
+          <Option name="linux24_icmp_echo_ignore_all"></Option>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
+          <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
+          <Option name="linux24_ip_dynaddr"></Option>
+          <Option name="linux24_ip_forward"></Option>
+          <Option name="linux24_log_martians"></Option>
+          <Option name="linux24_path_ip"></Option>
+          <Option name="linux24_path_iptables"></Option>
+          <Option name="linux24_path_logger"></Option>
+          <Option name="linux24_path_lsmod"></Option>
+          <Option name="linux24_path_modprobe"></Option>
+          <Option name="linux24_rp_filter"></Option>
+          <Option name="linux24_tcp_ecn"></Option>
+          <Option name="linux24_tcp_fack"></Option>
           <Option name="linux24_tcp_fin_timeout">30</Option>
           <Option name="linux24_tcp_keepalive_interval">1800</Option>
-          <Option name="linux24_tcp_sack"/>
-          <Option name="linux24_tcp_syncookies"/>
-          <Option name="linux24_tcp_timestamps"/>
-          <Option name="linux24_tcp_window_scaling"/>
+          <Option name="linux24_tcp_sack"></Option>
+          <Option name="linux24_tcp_syncookies"></Option>
+          <Option name="linux24_tcp_timestamps"></Option>
+          <Option name="linux24_tcp_window_scaling"></Option>
           <Option name="load_modules">False</Option>
           <Option name="local_nat">False</Option>
           <Option name="log_all">False</Option>
@@ -8264,20 +8264,20 @@
           <Option name="log_tcp_opt">False</Option>
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"/>
+          <Option name="mgmt_addr"></Option>
           <Option name="mgmt_ssh">False</Option>
           <Option name="no_iochains_for_any">False</Option>
           <Option name="no_optimisation">False</Option>
-          <Option name="output_file"/>
+          <Option name="output_file"></Option>
           <Option name="platform">iptables</Option>
           <Option name="prolog_place">top</Option>
-          <Option name="prolog_script"/>
+          <Option name="prolog_script"></Option>
           <Option name="proxy_arp">False</Option>
-          <Option name="script_env_path"/>
-          <Option name="snmp_contact"/>
-          <Option name="snmp_description"/>
-          <Option name="snmp_location"/>
-          <Option name="sshArgs"/>
+          <Option name="script_env_path"></Option>
+          <Option name="snmp_contact"></Option>
+          <Option name="snmp_description"></Option>
+          <Option name="snmp_location"></Option>
+          <Option name="sshArgs"></Option>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -8499,7 +8499,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id4388CFEA674" disabled="False" group="" log="True" position="1" action="Deny" direction="Both" comment="">
@@ -8519,7 +8519,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -8540,7 +8540,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -8561,7 +8561,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -8582,7 +8582,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -8604,7 +8604,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -8625,7 +8625,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -8647,7 +8647,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -8669,7 +8669,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id4389EEA118346" disabled="False" group="" log="False" position="9" action="Accept" direction="Both" comment="">
@@ -8689,8 +8689,8 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_keep_state">False</Option>
               <Option name="pf_max_src_conn">5</Option>
               <Option name="pf_max_src_conn_flush">True</Option>
@@ -8699,7 +8699,7 @@
               <Option name="pf_max_src_conn_rate_flush">False</Option>
               <Option name="pf_max_src_conn_rate_global">False</Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
-              <Option name="pf_max_src_conn_rate_overload_table"/>
+              <Option name="pf_max_src_conn_rate_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">0</Option>
               <Option name="pf_max_src_states">0</Option>
@@ -8725,7 +8725,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id4389EE3C18346" disabled="False" group="" log="True" position="11" action="Deny" direction="Both" comment="">
@@ -8745,7 +8745,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -8774,50 +8774,50 @@
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
           <Option name="action_on_reject">ICMP net unreachable</Option>
-          <Option name="activationCmd"/>
-          <Option name="admUser"/>
-          <Option name="altAddress"/>
+          <Option name="activationCmd"></Option>
+          <Option name="admUser"></Option>
+          <Option name="altAddress"></Option>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">False</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
-          <Option name="cmdline"/>
-          <Option name="compiler"/>
+          <Option name="cmdline"></Option>
+          <Option name="compiler"></Option>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="drop_invalid">False</Option>
           <Option name="dyn_addr">False</Option>
-          <Option name="epilog_script"/>
-          <Option name="firewall_dir"/>
+          <Option name="epilog_script"></Option>
+          <Option name="firewall_dir"></Option>
           <Option name="firewall_is_part_of_any">True</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="ignore_empty_groups">False</Option>
-          <Option name="inst_cmdline"/>
-          <Option name="inst_script"/>
-          <Option name="install_script"/>
+          <Option name="inst_cmdline"></Option>
+          <Option name="inst_script"></Option>
+          <Option name="install_script"></Option>
           <Option name="limit_suffix">/day</Option>
           <Option name="limit_value">0</Option>
-          <Option name="linux24_accept_redirects"/>
-          <Option name="linux24_accept_source_route"/>
-          <Option name="linux24_icmp_echo_ignore_all"/>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
-          <Option name="linux24_icmp_ignore_bogus_error_responses"/>
-          <Option name="linux24_ip_dynaddr"/>
-          <Option name="linux24_ip_forward"/>
-          <Option name="linux24_log_martians"/>
-          <Option name="linux24_path_ip"/>
-          <Option name="linux24_path_iptables"/>
-          <Option name="linux24_path_logger"/>
-          <Option name="linux24_path_lsmod"/>
-          <Option name="linux24_path_modprobe"/>
-          <Option name="linux24_rp_filter"/>
-          <Option name="linux24_tcp_ecn"/>
-          <Option name="linux24_tcp_fack"/>
+          <Option name="linux24_accept_redirects"></Option>
+          <Option name="linux24_accept_source_route"></Option>
+          <Option name="linux24_icmp_echo_ignore_all"></Option>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
+          <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
+          <Option name="linux24_ip_dynaddr"></Option>
+          <Option name="linux24_ip_forward"></Option>
+          <Option name="linux24_log_martians"></Option>
+          <Option name="linux24_path_ip"></Option>
+          <Option name="linux24_path_iptables"></Option>
+          <Option name="linux24_path_logger"></Option>
+          <Option name="linux24_path_lsmod"></Option>
+          <Option name="linux24_path_modprobe"></Option>
+          <Option name="linux24_rp_filter"></Option>
+          <Option name="linux24_tcp_ecn"></Option>
+          <Option name="linux24_tcp_fack"></Option>
           <Option name="linux24_tcp_fin_timeout">30</Option>
           <Option name="linux24_tcp_keepalive_interval">1800</Option>
-          <Option name="linux24_tcp_sack"/>
-          <Option name="linux24_tcp_syncookies"/>
-          <Option name="linux24_tcp_timestamps"/>
-          <Option name="linux24_tcp_window_scaling"/>
+          <Option name="linux24_tcp_sack"></Option>
+          <Option name="linux24_tcp_syncookies"></Option>
+          <Option name="linux24_tcp_timestamps"></Option>
+          <Option name="linux24_tcp_window_scaling"></Option>
           <Option name="load_modules">False</Option>
           <Option name="local_nat">False</Option>
           <Option name="log_all">False</Option>
@@ -8831,20 +8831,20 @@
           <Option name="log_tcp_opt">False</Option>
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"/>
+          <Option name="mgmt_addr"></Option>
           <Option name="mgmt_ssh">False</Option>
           <Option name="no_iochains_for_any">False</Option>
           <Option name="no_optimisation">False</Option>
-          <Option name="output_file"/>
+          <Option name="output_file"></Option>
           <Option name="platform">iptables</Option>
           <Option name="prolog_place">top</Option>
-          <Option name="prolog_script"/>
+          <Option name="prolog_script"></Option>
           <Option name="proxy_arp">False</Option>
-          <Option name="script_env_path"/>
-          <Option name="snmp_contact"/>
-          <Option name="snmp_description"/>
-          <Option name="snmp_location"/>
-          <Option name="sshArgs"/>
+          <Option name="script_env_path"></Option>
+          <Option name="snmp_contact"></Option>
+          <Option name="snmp_description"></Option>
+          <Option name="snmp_location"></Option>
+          <Option name="sshArgs"></Option>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -8931,15 +8931,15 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
+              <Option name="action_on_reject"></Option>
               <Option name="classification">False</Option>
-              <Option name="classify_str"/>
-              <Option name="custom_str"/>
+              <Option name="classify_str"></Option>
+              <Option name="custom_str"></Option>
               <Option name="ipfw_pipe_method">0</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="routing">False</Option>
-              <Option name="rule_name_accounting"/>
+              <Option name="rule_name_accounting"></Option>
               <Option name="tagging">True</Option>
               <Option name="tagobject_id">id43F4556A28869</Option>
             </PolicyRuleOptions>
@@ -8961,7 +8961,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id43F4555D28869" disabled="False" group="" log="False" position="2" action="Accept" direction="Outbound" comment="">
@@ -8981,7 +8981,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id43F462CA28869" disabled="False" group="" log="False" position="3" action="Accept" direction="Outbound" comment="">
@@ -9001,7 +9001,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id43EC5DEF2355" disabled="False" group="" log="False" position="4" action="Accept" direction="Both" comment="">
@@ -9021,7 +9021,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id43EC6B8B2355" disabled="False" group="" log="False" position="5" action="Accept" direction="Both" comment="">
@@ -9041,7 +9041,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id1391220443" disabled="False" group="" log="False" position="6" action="Accept" direction="Both" comment="">
@@ -9062,7 +9062,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id43EC6BAF2355" disabled="True" group="" log="False" position="7" action="Accept" direction="Both" comment="">
@@ -9082,7 +9082,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id43EC6BC02355" disabled="False" group="" log="False" position="8" action="Accept" direction="Both" comment="">
@@ -9103,7 +9103,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id43EC6BEA2355" disabled="True" group="" log="False" position="9" action="Accept" direction="Both" comment="">
@@ -9124,7 +9124,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id43F4407F28542" disabled="False" group="" log="False" position="10" action="Accept" direction="Both" comment="">
@@ -9144,18 +9144,18 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
+              <Option name="action_on_reject"></Option>
               <Option name="classification">True</Option>
               <Option name="classify_str">mail</Option>
-              <Option name="custom_str"/>
+              <Option name="custom_str"></Option>
               <Option name="ipfw_pipe_method">0</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="pf_classify_str">mail</Option>
               <Option name="routing">False</Option>
-              <Option name="rule_name_accounting"/>
+              <Option name="rule_name_accounting"></Option>
               <Option name="stateless">True</Option>
               <Option name="tagging">False</Option>
-              <Option name="tagvalue"/>
+              <Option name="tagvalue"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id43EC5E132355" disabled="False" group="" log="True" position="11" action="Deny" direction="Both" comment="">
@@ -9175,7 +9175,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -9208,15 +9208,15 @@
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
           <Option name="action_on_reject">ICMP net unreachable</Option>
-          <Option name="activationCmd"/>
-          <Option name="admUser"/>
-          <Option name="altAddress"/>
+          <Option name="activationCmd"></Option>
+          <Option name="admUser"></Option>
+          <Option name="altAddress"></Option>
           <Option name="check_shading">False</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
-          <Option name="cmdline"/>
-          <Option name="compiler"/>
-          <Option name="conf1_file"/>
-          <Option name="conf_file_name_on_firewall"/>
+          <Option name="cmdline"></Option>
+          <Option name="compiler"></Option>
+          <Option name="conf1_file"></Option>
+          <Option name="conf_file_name_on_firewall"></Option>
           <Option name="configure_bridge_interfaces">False</Option>
           <Option name="configure_carp_interfaces">False</Option>
           <Option name="configure_interfaces">False</Option>
@@ -9224,21 +9224,21 @@
           <Option name="configure_vlan_interfaces">False</Option>
           <Option name="debug">False</Option>
           <Option name="dyn_addr">False</Option>
-          <Option name="epilog_script"/>
+          <Option name="epilog_script"></Option>
           <Option name="fallback_log">False</Option>
-          <Option name="firewall_dir"/>
+          <Option name="firewall_dir"></Option>
           <Option name="firewall_is_part_of_any">True</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
-          <Option name="freebsd_path_ipf"/>
-          <Option name="freebsd_path_ipnat"/>
-          <Option name="freebsd_path_sysctl"/>
+          <Option name="freebsd_path_ipf"></Option>
+          <Option name="freebsd_path_ipnat"></Option>
+          <Option name="freebsd_path_sysctl"></Option>
           <Option name="generate_rc_conf_file">False</Option>
           <Option name="generate_shell_script">True</Option>
           <Option name="ignore_empty_groups">False</Option>
           <Option name="in_out_code">True</Option>
-          <Option name="inst_cmdline"/>
-          <Option name="inst_script"/>
-          <Option name="install_script"/>
+          <Option name="inst_cmdline"></Option>
+          <Option name="inst_script"></Option>
+          <Option name="install_script"></Option>
           <Option name="ipv4_6_order">ipv4_first</Option>
           <Option name="limit_suffix">/day</Option>
           <Option name="limit_value">0</Option>
@@ -9251,18 +9251,18 @@
           <Option name="log_level">debug</Option>
           <Option name="log_limit_suffix">/second</Option>
           <Option name="log_limit_value">0</Option>
-          <Option name="log_prefix"/>
+          <Option name="log_prefix"></Option>
           <Option name="log_tcp_opt">False</Option>
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"/>
+          <Option name="mgmt_addr"></Option>
           <Option name="mgmt_ssh">False</Option>
           <Option name="modulate_state">False</Option>
           <Option name="no_iochains_for_any">False</Option>
           <Option name="no_optimisation">False</Option>
-          <Option name="openbsd_path_pfctl"/>
-          <Option name="openbsd_path_sysctl"/>
-          <Option name="output_file"/>
+          <Option name="openbsd_path_pfctl"></Option>
+          <Option name="openbsd_path_sysctl"></Option>
+          <Option name="output_file"></Option>
           <Option name="pass_all_out">False</Option>
           <Option name="pf_adaptive_end">0</Option>
           <Option name="pf_adaptive_start">0</Option>
@@ -9283,7 +9283,7 @@
           <Option name="pf_limit_table_entries">0</Option>
           <Option name="pf_limit_tables">0</Option>
           <Option name="pf_modulate_state">False</Option>
-          <Option name="pf_optimization"/>
+          <Option name="pf_optimization"></Option>
           <Option name="pf_other_first">0</Option>
           <Option name="pf_other_multiple">0</Option>
           <Option name="pf_other_single">0</Option>
@@ -9312,7 +9312,7 @@
           <Option name="pf_set_udp_first">False</Option>
           <Option name="pf_set_udp_multiple">False</Option>
           <Option name="pf_set_udp_single">False</Option>
-          <Option name="pf_state_policy"/>
+          <Option name="pf_state_policy"></Option>
           <Option name="pf_tcp_closed">0</Option>
           <Option name="pf_tcp_closing">0</Option>
           <Option name="pf_tcp_established">0</Option>
@@ -9326,15 +9326,15 @@
           <Option name="pf_udp_single">0</Option>
           <Option name="platform">iptables</Option>
           <Option name="prolog_place">fw_file</Option>
-          <Option name="prolog_script"/>
+          <Option name="prolog_script"></Option>
           <Option name="proxy_arp">False</Option>
-          <Option name="scpArgs"/>
-          <Option name="script_env_path"/>
-          <Option name="script_name_on_firewall"/>
-          <Option name="snmp_contact"/>
-          <Option name="snmp_description"/>
-          <Option name="snmp_location"/>
-          <Option name="sshArgs"/>
+          <Option name="scpArgs"></Option>
+          <Option name="script_env_path"></Option>
+          <Option name="script_name_on_firewall"></Option>
+          <Option name="snmp_contact"></Option>
+          <Option name="snmp_description"></Option>
+          <Option name="snmp_location"></Option>
+          <Option name="sshArgs"></Option>
           <Option name="use_ip_tool">False</Option>
           <Option name="use_numeric_log_levels">False</Option>
           <Option name="use_tables">True</Option>
@@ -9538,7 +9538,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -9559,8 +9559,8 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_max_src_nodes">0</Option>
               <Option name="pf_max_src_states">0</Option>
               <Option name="pf_rule_max_state">1000</Option>
@@ -9594,20 +9594,20 @@
         <FirewallOptions>
           <Option name="accept_established">true</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
-          <Option name="activationCmd"/>
-          <Option name="admUser"/>
-          <Option name="altAddress"/>
+          <Option name="activationCmd"></Option>
+          <Option name="admUser"></Option>
+          <Option name="altAddress"></Option>
           <Option name="check_shading">True</Option>
-          <Option name="cmdline"/>
-          <Option name="compiler"/>
-          <Option name="conf_file_name_on_firewall"/>
+          <Option name="cmdline"></Option>
+          <Option name="compiler"></Option>
+          <Option name="conf_file_name_on_firewall"></Option>
           <Option name="configure_carp_interfaces">False</Option>
           <Option name="configure_interfaces">True</Option>
           <Option name="configure_pfsync_interfaces">False</Option>
           <Option name="configure_vlan_interfaces">False</Option>
           <Option name="debug">False</Option>
           <Option name="eliminate_duplicates">true</Option>
-          <Option name="epilog_script"/>
+          <Option name="epilog_script"></Option>
           <Option name="fallback_log">False</Option>
           <Option name="firewall_dir">/etc</Option>
           <Option name="firewall_is_part_of_any_and_networks">true</Option>
@@ -9624,11 +9624,11 @@
           <Option name="loopback_interface">lo0</Option>
           <Option name="macosx_ip_forward">1</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"/>
+          <Option name="mgmt_addr"></Option>
           <Option name="mgmt_ssh">False</Option>
           <Option name="modulate_state">False</Option>
           <Option name="openbsd_ip_forward">1</Option>
-          <Option name="output_file"/>
+          <Option name="output_file"></Option>
           <Option name="pass_all_out">False</Option>
           <Option name="pf_adaptive_end">0</Option>
           <Option name="pf_adaptive_start">0</Option>
@@ -9677,7 +9677,7 @@
           <Option name="pf_set_udp_first">False</Option>
           <Option name="pf_set_udp_multiple">False</Option>
           <Option name="pf_set_udp_single">False</Option>
-          <Option name="pf_state_policy"/>
+          <Option name="pf_state_policy"></Option>
           <Option name="pf_tcp_closed">0</Option>
           <Option name="pf_tcp_closing">0</Option>
           <Option name="pf_tcp_established">0</Option>
@@ -9707,10 +9707,10 @@
 </Option>
           <Option name="prompt1">$ </Option>
           <Option name="prompt2"> # </Option>
-          <Option name="scpArgs"/>
-          <Option name="script_name_on_firewall"/>
+          <Option name="scpArgs"></Option>
+          <Option name="script_name_on_firewall"></Option>
           <Option name="solaris_ip_forward">1</Option>
-          <Option name="sshArgs"/>
+          <Option name="sshArgs"></Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="verify_interfaces">true</Option>
         </FirewallOptions>
@@ -9791,15 +9791,15 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
+              <Option name="action_on_reject"></Option>
               <Option name="classification">False</Option>
-              <Option name="classify_str"/>
-              <Option name="custom_str"/>
+              <Option name="classify_str"></Option>
+              <Option name="custom_str"></Option>
               <Option name="ipfw_pipe_method">0</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="routing">False</Option>
-              <Option name="rule_name_accounting"/>
+              <Option name="rule_name_accounting"></Option>
               <Option name="tagging">True</Option>
               <Option name="tagobject_id">id43F4556A28869</Option>
             </PolicyRuleOptions>
@@ -9821,7 +9821,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id445DB36132739" disabled="False" group="" log="True" position="2" action="Branch" direction="Inbound" comment="logging is not allowed with 'anchor'&#10;compiler should not generate 'log' keyword&#10;">
@@ -9842,7 +9842,7 @@
             </When>
             <PolicyRuleOptions>
               <Option name="branch_name">rule2_branch</Option>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -9864,7 +9864,7 @@
             </When>
             <PolicyRuleOptions>
               <Option name="branch_name">rule3_branch</Option>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -9885,7 +9885,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id445DB38532739" disabled="False" group="" log="False" position="5" action="Branch" direction="Both" comment="">
@@ -9906,7 +9906,7 @@
             </When>
             <PolicyRuleOptions>
               <Option name="branch_name">rule5_branch</Option>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -9927,7 +9927,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id445DB39D32739" disabled="False" group="" log="False" position="7" action="Accept" direction="Both" comment="">
@@ -9948,7 +9948,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id445DB3AA32739" disabled="True" group="" log="False" position="8" action="Accept" direction="Both" comment="">
@@ -9969,7 +9969,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id445DB3B732739" disabled="False" group="" log="False" position="9" action="Accept" direction="Both" comment="">
@@ -9989,18 +9989,18 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
+              <Option name="action_on_reject"></Option>
               <Option name="classification">True</Option>
               <Option name="classify_str">mail</Option>
-              <Option name="custom_str"/>
+              <Option name="custom_str"></Option>
               <Option name="ipfw_pipe_method">0</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="pf_classify_str">mail</Option>
               <Option name="routing">False</Option>
-              <Option name="rule_name_accounting"/>
+              <Option name="rule_name_accounting"></Option>
               <Option name="stateless">True</Option>
               <Option name="tagging">False</Option>
-              <Option name="tagvalue"/>
+              <Option name="tagvalue"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id445DB3C332739" disabled="False" group="" log="True" position="10" action="Deny" direction="Both" comment="">
@@ -10020,7 +10020,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -10044,7 +10044,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id445DB42332739" disabled="False" group="" log="True" position="1" action="Deny" direction="Both" comment="">
@@ -10064,7 +10064,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -10088,7 +10088,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id445DB43032739" disabled="False" group="" log="False" position="1" action="Accept" direction="Both" comment="">
@@ -10109,7 +10109,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id445DB43E32739" disabled="False" group="" log="True" position="2" action="Deny" direction="Both" comment="">
@@ -10129,7 +10129,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -10165,13 +10165,13 @@
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
           <Option name="action_on_reject">ICMP net unreachable</Option>
-          <Option name="activationCmd"/>
-          <Option name="admUser"/>
-          <Option name="altAddress"/>
+          <Option name="activationCmd"></Option>
+          <Option name="admUser"></Option>
+          <Option name="altAddress"></Option>
           <Option name="check_shading">False</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
-          <Option name="cmdline"/>
-          <Option name="compiler"/>
+          <Option name="cmdline"></Option>
+          <Option name="compiler"></Option>
           <Option name="conf_file_name_on_firewall">pf.conf</Option>
           <Option name="configure_carp_interfaces">False</Option>
           <Option name="configure_interfaces">False</Option>
@@ -10179,19 +10179,19 @@
           <Option name="configure_vlan_interfaces">False</Option>
           <Option name="debug">False</Option>
           <Option name="dyn_addr">False</Option>
-          <Option name="epilog_script"/>
+          <Option name="epilog_script"></Option>
           <Option name="fallback_log">False</Option>
-          <Option name="firewall_dir"/>
+          <Option name="firewall_dir"></Option>
           <Option name="firewall_is_part_of_any">True</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
-          <Option name="freebsd_path_ipf"/>
-          <Option name="freebsd_path_ipnat"/>
-          <Option name="freebsd_path_sysctl"/>
+          <Option name="freebsd_path_ipf"></Option>
+          <Option name="freebsd_path_ipnat"></Option>
+          <Option name="freebsd_path_sysctl"></Option>
           <Option name="ignore_empty_groups">False</Option>
           <Option name="in_out_code">True</Option>
-          <Option name="inst_cmdline"/>
-          <Option name="inst_script"/>
-          <Option name="install_script"/>
+          <Option name="inst_cmdline"></Option>
+          <Option name="inst_script"></Option>
+          <Option name="install_script"></Option>
           <Option name="ipv4_6_order">ipv4_first</Option>
           <Option name="limit_suffix">/day</Option>
           <Option name="limit_value">0</Option>
@@ -10204,18 +10204,18 @@
           <Option name="log_level">debug</Option>
           <Option name="log_limit_suffix">/second</Option>
           <Option name="log_limit_value">0</Option>
-          <Option name="log_prefix"/>
+          <Option name="log_prefix"></Option>
           <Option name="log_tcp_opt">False</Option>
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"/>
+          <Option name="mgmt_addr"></Option>
           <Option name="mgmt_ssh">False</Option>
           <Option name="modulate_state">False</Option>
           <Option name="no_iochains_for_any">False</Option>
           <Option name="no_optimisation">False</Option>
-          <Option name="openbsd_path_pfctl"/>
-          <Option name="openbsd_path_sysctl"/>
-          <Option name="output_file"/>
+          <Option name="openbsd_path_pfctl"></Option>
+          <Option name="openbsd_path_sysctl"></Option>
+          <Option name="output_file"></Option>
           <Option name="pass_all_out">False</Option>
           <Option name="pf_adaptive_end">0</Option>
           <Option name="pf_adaptive_start">0</Option>
@@ -10235,7 +10235,7 @@
           <Option name="pf_limit_states">10000</Option>
           <Option name="pf_limit_table_entries">0</Option>
           <Option name="pf_limit_tables">0</Option>
-          <Option name="pf_optimization"/>
+          <Option name="pf_optimization"></Option>
           <Option name="pf_other_first">0</Option>
           <Option name="pf_other_multiple">0</Option>
           <Option name="pf_other_single">0</Option>
@@ -10276,15 +10276,15 @@
           <Option name="pf_udp_single">0</Option>
           <Option name="platform">iptables</Option>
           <Option name="prolog_place">fw_file</Option>
-          <Option name="prolog_script"/>
+          <Option name="prolog_script"></Option>
           <Option name="proxy_arp">False</Option>
-          <Option name="scpArgs"/>
-          <Option name="script_env_path"/>
+          <Option name="scpArgs"></Option>
+          <Option name="script_env_path"></Option>
           <Option name="script_name_on_firewall">pf.fw</Option>
-          <Option name="snmp_contact"/>
-          <Option name="snmp_description"/>
-          <Option name="snmp_location"/>
-          <Option name="sshArgs"/>
+          <Option name="snmp_contact"></Option>
+          <Option name="snmp_description"></Option>
+          <Option name="snmp_location"></Option>
+          <Option name="sshArgs"></Option>
           <Option name="use_ip_tool">False</Option>
           <Option name="use_numeric_log_levels">False</Option>
           <Option name="use_tables">True</Option>
@@ -10366,8 +10366,8 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_max_src_nodes">0</Option>
               <Option name="pf_max_src_states">0</Option>
               <Option name="pf_rule_max_state">0</Option>
@@ -10392,8 +10392,8 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_max_src_nodes">0</Option>
               <Option name="pf_max_src_states">0</Option>
               <Option name="pf_rule_max_state">0</Option>
@@ -10419,31 +10419,31 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
-              <Option name="branch_anchor_name"/>
-              <Option name="branch_chain_name"/>
+              <Option name="action_on_reject"></Option>
+              <Option name="branch_anchor_name"></Option>
+              <Option name="branch_chain_name"></Option>
               <Option name="classification">False</Option>
-              <Option name="classify_str"/>
-              <Option name="custom_str"/>
-              <Option name="ipf_route_opt_addr"/>
-              <Option name="ipf_route_opt_if"/>
+              <Option name="classify_str"></Option>
+              <Option name="custom_str"></Option>
+              <Option name="ipf_route_opt_addr"></Option>
+              <Option name="ipf_route_opt_if"></Option>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"/>
-              <Option name="ipt_iif"/>
+              <Option name="ipt_gw"></Option>
+              <Option name="ipt_iif"></Option>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"/>
+              <Option name="ipt_oif"></Option>
               <Option name="ipt_tee">False</Option>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_opt_addr">192.0.2.10</Option>
               <Option name="pf_route_opt_if">le1</Option>
               <Option name="pf_route_option">route_through</Option>
               <Option name="routing">True</Option>
-              <Option name="rule_name_accounting"/>
+              <Option name="rule_name_accounting"></Option>
               <Option name="stateless">True</Option>
               <Option name="tagging">False</Option>
             </PolicyRuleOptions>
@@ -10465,31 +10465,31 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
-              <Option name="branch_anchor_name"/>
-              <Option name="branch_chain_name"/>
+              <Option name="action_on_reject"></Option>
+              <Option name="branch_anchor_name"></Option>
+              <Option name="branch_chain_name"></Option>
               <Option name="classification">False</Option>
-              <Option name="classify_str"/>
-              <Option name="custom_str"/>
-              <Option name="ipf_route_opt_addr"/>
-              <Option name="ipf_route_opt_if"/>
+              <Option name="classify_str"></Option>
+              <Option name="custom_str"></Option>
+              <Option name="ipf_route_opt_addr"></Option>
+              <Option name="ipf_route_opt_if"></Option>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"/>
-              <Option name="ipt_iif"/>
+              <Option name="ipt_gw"></Option>
+              <Option name="ipt_iif"></Option>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"/>
+              <Option name="ipt_oif"></Option>
               <Option name="ipt_tee">False</Option>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_opt_addr">192.0.3.10</Option>
               <Option name="pf_route_opt_if">le2</Option>
               <Option name="pf_route_option">route_through</Option>
               <Option name="routing">True</Option>
-              <Option name="rule_name_accounting"/>
+              <Option name="rule_name_accounting"></Option>
               <Option name="stateless">True</Option>
               <Option name="tagging">False</Option>
             </PolicyRuleOptions>
@@ -10511,7 +10511,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id4494902D2976" disabled="False" group="" log="True" position="5" action="Deny" direction="Both" comment="">
@@ -10531,7 +10531,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -10564,16 +10564,16 @@
         <FirewallOptions>
           <Option name="accept_established">true</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
-          <Option name="activationCmd"/>
-          <Option name="admUser"/>
-          <Option name="altAddress"/>
+          <Option name="activationCmd"></Option>
+          <Option name="admUser"></Option>
+          <Option name="altAddress"></Option>
           <Option name="check_shading">True</Option>
-          <Option name="cmdline"/>
-          <Option name="compiler"/>
+          <Option name="cmdline"></Option>
+          <Option name="compiler"></Option>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="eliminate_duplicates">true</Option>
-          <Option name="epilog_script"/>
+          <Option name="epilog_script"></Option>
           <Option name="fallback_log">False</Option>
           <Option name="firewall_dir">/etc</Option>
           <Option name="firewall_is_part_of_any_and_networks">true</Option>
@@ -10589,11 +10589,11 @@
           <Option name="loopback_interface">lo0</Option>
           <Option name="macosx_ip_forward">1</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"/>
+          <Option name="mgmt_addr"></Option>
           <Option name="mgmt_ssh">False</Option>
           <Option name="modulate_state">True</Option>
           <Option name="openbsd_ip_forward">1</Option>
-          <Option name="output_file"/>
+          <Option name="output_file"></Option>
           <Option name="pass_all_out">False</Option>
           <Option name="pf_adaptive_end">0</Option>
           <Option name="pf_adaptive_start">0</Option>
@@ -10606,7 +10606,7 @@
           <Option name="pf_icmp_first">0</Option>
           <Option name="pf_limit_frags">5000</Option>
           <Option name="pf_limit_states">10000</Option>
-          <Option name="pf_optimization"/>
+          <Option name="pf_optimization"></Option>
           <Option name="pf_other_first">0</Option>
           <Option name="pf_other_multiple">0</Option>
           <Option name="pf_other_single">0</Option>
@@ -10657,11 +10657,11 @@
           <Option name="pix_security_fragguard_supported">true</Option>
           <Option name="pix_syslog_device_id_supported">false</Option>
           <Option name="pix_use_acl_remarks">true</Option>
-          <Option name="prolog_script"/>
+          <Option name="prolog_script"></Option>
           <Option name="prompt1">$ </Option>
           <Option name="prompt2"> # </Option>
           <Option name="solaris_ip_forward">1</Option>
-          <Option name="sshArgs"/>
+          <Option name="sshArgs"></Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="verify_interfaces">true</Option>
         </FirewallOptions>
@@ -10688,7 +10688,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id44F7056428576" disabled="False" group="" log="True" position="1" action="Accept" direction="Outbound" comment="">
@@ -10708,7 +10708,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id20664X8713" disabled="False" group="" log="True" position="2" action="Accept" direction="Outbound" comment="">
@@ -10729,7 +10729,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id20710X8713" disabled="False" group="" log="True" position="3" action="Accept" direction="Outbound" comment="">
@@ -10749,7 +10749,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id44F707E428576" disabled="False" group="" log="True" position="4" action="Accept" direction="Outbound" comment="">
@@ -10769,7 +10769,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <RuleSetOptions/>
@@ -10793,20 +10793,20 @@
         <FirewallOptions>
           <Option name="accept_established">true</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
-          <Option name="activationCmd"/>
-          <Option name="admUser"/>
-          <Option name="altAddress"/>
+          <Option name="activationCmd"></Option>
+          <Option name="admUser"></Option>
+          <Option name="altAddress"></Option>
           <Option name="check_shading">True</Option>
           <Option name="cmdline">-xt</Option>
-          <Option name="compiler"/>
-          <Option name="conf_file_name_on_firewall"/>
+          <Option name="compiler"></Option>
+          <Option name="conf_file_name_on_firewall"></Option>
           <Option name="configure_carp_interfaces">False</Option>
           <Option name="configure_interfaces">True</Option>
           <Option name="configure_pfsync_interfaces">False</Option>
           <Option name="configure_vlan_interfaces">False</Option>
           <Option name="debug">False</Option>
           <Option name="eliminate_duplicates">true</Option>
-          <Option name="epilog_script"/>
+          <Option name="epilog_script"></Option>
           <Option name="fallback_log">False</Option>
           <Option name="firewall_dir">/etc</Option>
           <Option name="firewall_is_part_of_any_and_networks">true</Option>
@@ -10823,10 +10823,10 @@
           <Option name="loopback_interface">lo0</Option>
           <Option name="macosx_ip_forward">1</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"/>
+          <Option name="mgmt_addr"></Option>
           <Option name="mgmt_ssh">False</Option>
           <Option name="openbsd_ip_forward">1</Option>
-          <Option name="output_file"/>
+          <Option name="output_file"></Option>
           <Option name="pass_all_out">false</Option>
           <Option name="pf_adaptive_end">0</Option>
           <Option name="pf_adaptive_start">0</Option>
@@ -10847,7 +10847,7 @@
           <Option name="pf_limit_table_entries">0</Option>
           <Option name="pf_limit_tables">0</Option>
           <Option name="pf_modulate_state">False</Option>
-          <Option name="pf_optimization"/>
+          <Option name="pf_optimization"></Option>
           <Option name="pf_other_first">0</Option>
           <Option name="pf_other_multiple">0</Option>
           <Option name="pf_other_single">0</Option>
@@ -10875,7 +10875,7 @@
           <Option name="pf_set_udp_first">False</Option>
           <Option name="pf_set_udp_multiple">False</Option>
           <Option name="pf_set_udp_single">False</Option>
-          <Option name="pf_state_policy"/>
+          <Option name="pf_state_policy"></Option>
           <Option name="pf_tcp_closed">0</Option>
           <Option name="pf_tcp_closing">0</Option>
           <Option name="pf_tcp_established">0</Option>
@@ -10900,13 +10900,13 @@
           <Option name="pix_syslog_device_id_supported">false</Option>
           <Option name="pix_use_acl_remarks">true</Option>
           <Option name="prolog_place">fw_file</Option>
-          <Option name="prolog_script"/>
+          <Option name="prolog_script"></Option>
           <Option name="prompt1">$ </Option>
           <Option name="prompt2"> # </Option>
-          <Option name="scpArgs"/>
-          <Option name="script_name_on_firewall"/>
+          <Option name="scpArgs"></Option>
+          <Option name="script_name_on_firewall"></Option>
           <Option name="solaris_ip_forward">1</Option>
-          <Option name="sshArgs"/>
+          <Option name="sshArgs"></Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="verify_interfaces">true</Option>
         </FirewallOptions>
@@ -10988,7 +10988,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -11009,17 +11009,17 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_keep_state">False</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_flush">False</Option>
               <Option name="pf_max_src_conn_rate_global">False</Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
-              <Option name="pf_max_src_conn_rate_overload_table"/>
+              <Option name="pf_max_src_conn_rate_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">0</Option>
               <Option name="pf_max_src_states">0</Option>
@@ -11045,17 +11045,17 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_keep_state">True</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_flush">False</Option>
               <Option name="pf_max_src_conn_rate_global">False</Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
-              <Option name="pf_max_src_conn_rate_overload_table"/>
+              <Option name="pf_max_src_conn_rate_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">0</Option>
               <Option name="pf_max_src_states">0</Option>
@@ -11081,7 +11081,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -11110,29 +11110,29 @@
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">False</Option>
           <Option name="action_on_reject">ICMP net unreachable</Option>
-          <Option name="activationCmd"/>
-          <Option name="admUser"/>
-          <Option name="altAddress"/>
+          <Option name="activationCmd"></Option>
+          <Option name="admUser"></Option>
+          <Option name="altAddress"></Option>
           <Option name="check_shading">True</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
-          <Option name="cmdline"/>
-          <Option name="compiler"/>
+          <Option name="cmdline"></Option>
+          <Option name="compiler"></Option>
           <Option name="configure_interfaces">False</Option>
           <Option name="debug">False</Option>
           <Option name="dyn_addr">False</Option>
-          <Option name="epilog_script"/>
+          <Option name="epilog_script"></Option>
           <Option name="fallback_log">False</Option>
-          <Option name="firewall_dir"/>
+          <Option name="firewall_dir"></Option>
           <Option name="firewall_is_part_of_any">True</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
-          <Option name="freebsd_path_ipf"/>
-          <Option name="freebsd_path_ipnat"/>
-          <Option name="freebsd_path_sysctl"/>
+          <Option name="freebsd_path_ipf"></Option>
+          <Option name="freebsd_path_ipnat"></Option>
+          <Option name="freebsd_path_sysctl"></Option>
           <Option name="ignore_empty_groups">False</Option>
           <Option name="in_out_code">True</Option>
-          <Option name="inst_cmdline"/>
-          <Option name="inst_script"/>
-          <Option name="install_script"/>
+          <Option name="inst_cmdline"></Option>
+          <Option name="inst_script"></Option>
+          <Option name="install_script"></Option>
           <Option name="limit_suffix">/day</Option>
           <Option name="limit_value">0</Option>
           <Option name="linux24_ip_forward">0</Option>
@@ -11144,7 +11144,7 @@
           <Option name="log_level">debug</Option>
           <Option name="log_limit_suffix">/second</Option>
           <Option name="log_limit_value">0</Option>
-          <Option name="log_prefix"/>
+          <Option name="log_prefix"></Option>
           <Option name="log_tcp_opt">False</Option>
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">True</Option>
@@ -11153,9 +11153,9 @@
           <Option name="modulate_state">False</Option>
           <Option name="no_iochains_for_any">False</Option>
           <Option name="no_optimisation">False</Option>
-          <Option name="openbsd_path_pfctl"/>
-          <Option name="openbsd_path_sysctl"/>
-          <Option name="output_file"/>
+          <Option name="openbsd_path_pfctl"></Option>
+          <Option name="openbsd_path_sysctl"></Option>
+          <Option name="output_file"></Option>
           <Option name="pass_all_out">False</Option>
           <Option name="pf_adaptive_end">0</Option>
           <Option name="pf_adaptive_start">0</Option>
@@ -11174,7 +11174,7 @@
           <Option name="pf_limit_states">10000</Option>
           <Option name="pf_limit_table_entries">0</Option>
           <Option name="pf_limit_tables">0</Option>
-          <Option name="pf_optimization"/>
+          <Option name="pf_optimization"></Option>
           <Option name="pf_other_first">0</Option>
           <Option name="pf_other_multiple">0</Option>
           <Option name="pf_other_single">0</Option>
@@ -11215,13 +11215,13 @@
           <Option name="pf_udp_single">0</Option>
           <Option name="platform">iptables</Option>
           <Option name="prolog_place">fw_file</Option>
-          <Option name="prolog_script"/>
+          <Option name="prolog_script"></Option>
           <Option name="proxy_arp">False</Option>
-          <Option name="script_env_path"/>
-          <Option name="snmp_contact"/>
-          <Option name="snmp_description"/>
-          <Option name="snmp_location"/>
-          <Option name="sshArgs"/>
+          <Option name="script_env_path"></Option>
+          <Option name="snmp_contact"></Option>
+          <Option name="snmp_description"></Option>
+          <Option name="snmp_location"></Option>
+          <Option name="sshArgs"></Option>
           <Option name="use_ip_tool">False</Option>
           <Option name="use_numeric_log_levels">False</Option>
           <Option name="use_tables">True</Option>
@@ -11304,7 +11304,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -11325,17 +11325,17 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_keep_state">False</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_flush">False</Option>
               <Option name="pf_max_src_conn_rate_global">False</Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
-              <Option name="pf_max_src_conn_rate_overload_table"/>
+              <Option name="pf_max_src_conn_rate_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">0</Option>
               <Option name="pf_max_src_states">0</Option>
@@ -11361,17 +11361,17 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_keep_state">True</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_flush">False</Option>
               <Option name="pf_max_src_conn_rate_global">False</Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
-              <Option name="pf_max_src_conn_rate_overload_table"/>
+              <Option name="pf_max_src_conn_rate_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">0</Option>
               <Option name="pf_max_src_states">0</Option>
@@ -11397,7 +11397,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -11426,29 +11426,29 @@
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">False</Option>
           <Option name="action_on_reject">ICMP net unreachable</Option>
-          <Option name="activationCmd"/>
-          <Option name="admUser"/>
-          <Option name="altAddress"/>
+          <Option name="activationCmd"></Option>
+          <Option name="admUser"></Option>
+          <Option name="altAddress"></Option>
           <Option name="check_shading">True</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
-          <Option name="cmdline"/>
-          <Option name="compiler"/>
+          <Option name="cmdline"></Option>
+          <Option name="compiler"></Option>
           <Option name="configure_interfaces">False</Option>
           <Option name="debug">False</Option>
           <Option name="dyn_addr">False</Option>
-          <Option name="epilog_script"/>
+          <Option name="epilog_script"></Option>
           <Option name="fallback_log">False</Option>
-          <Option name="firewall_dir"/>
+          <Option name="firewall_dir"></Option>
           <Option name="firewall_is_part_of_any">True</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
-          <Option name="freebsd_path_ipf"/>
-          <Option name="freebsd_path_ipnat"/>
-          <Option name="freebsd_path_sysctl"/>
+          <Option name="freebsd_path_ipf"></Option>
+          <Option name="freebsd_path_ipnat"></Option>
+          <Option name="freebsd_path_sysctl"></Option>
           <Option name="ignore_empty_groups">False</Option>
           <Option name="in_out_code">True</Option>
-          <Option name="inst_cmdline"/>
-          <Option name="inst_script"/>
-          <Option name="install_script"/>
+          <Option name="inst_cmdline"></Option>
+          <Option name="inst_script"></Option>
+          <Option name="install_script"></Option>
           <Option name="ipv4_6_order">ipv4_first</Option>
           <Option name="limit_suffix">/day</Option>
           <Option name="limit_value">0</Option>
@@ -11461,7 +11461,7 @@
           <Option name="log_level">debug</Option>
           <Option name="log_limit_suffix">/second</Option>
           <Option name="log_limit_value">0</Option>
-          <Option name="log_prefix"/>
+          <Option name="log_prefix"></Option>
           <Option name="log_tcp_opt">False</Option>
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">True</Option>
@@ -11470,9 +11470,9 @@
           <Option name="modulate_state">False</Option>
           <Option name="no_iochains_for_any">False</Option>
           <Option name="no_optimisation">False</Option>
-          <Option name="openbsd_path_pfctl"/>
-          <Option name="openbsd_path_sysctl"/>
-          <Option name="output_file"/>
+          <Option name="openbsd_path_pfctl"></Option>
+          <Option name="openbsd_path_sysctl"></Option>
+          <Option name="output_file"></Option>
           <Option name="pass_all_out">False</Option>
           <Option name="pf_adaptive_end">0</Option>
           <Option name="pf_adaptive_start">0</Option>
@@ -11493,7 +11493,7 @@
           <Option name="pf_limit_table_entries">0</Option>
           <Option name="pf_limit_tables">0</Option>
           <Option name="pf_modulate_state">True</Option>
-          <Option name="pf_optimization"/>
+          <Option name="pf_optimization"></Option>
           <Option name="pf_other_first">0</Option>
           <Option name="pf_other_multiple">0</Option>
           <Option name="pf_other_single">0</Option>
@@ -11534,14 +11534,14 @@
           <Option name="pf_udp_single">0</Option>
           <Option name="platform">iptables</Option>
           <Option name="prolog_place">fw_file</Option>
-          <Option name="prolog_script"/>
+          <Option name="prolog_script"></Option>
           <Option name="proxy_arp">False</Option>
-          <Option name="scpArgs"/>
-          <Option name="script_env_path"/>
-          <Option name="snmp_contact"/>
-          <Option name="snmp_description"/>
-          <Option name="snmp_location"/>
-          <Option name="sshArgs"/>
+          <Option name="scpArgs"></Option>
+          <Option name="script_env_path"></Option>
+          <Option name="snmp_contact"></Option>
+          <Option name="snmp_description"></Option>
+          <Option name="snmp_location"></Option>
+          <Option name="sshArgs"></Option>
           <Option name="use_ip_tool">False</Option>
           <Option name="use_numeric_log_levels">False</Option>
           <Option name="use_tables">True</Option>
@@ -11624,7 +11624,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -11645,17 +11645,17 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_keep_state">False</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_flush">False</Option>
               <Option name="pf_max_src_conn_rate_global">False</Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
-              <Option name="pf_max_src_conn_rate_overload_table"/>
+              <Option name="pf_max_src_conn_rate_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">0</Option>
               <Option name="pf_max_src_states">0</Option>
@@ -11681,17 +11681,17 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_keep_state">True</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_flush">False</Option>
               <Option name="pf_max_src_conn_rate_global">False</Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
-              <Option name="pf_max_src_conn_rate_overload_table"/>
+              <Option name="pf_max_src_conn_rate_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">0</Option>
               <Option name="pf_max_src_states">0</Option>
@@ -11717,7 +11717,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -11746,29 +11746,29 @@
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
           <Option name="action_on_reject">ICMP net unreachable</Option>
-          <Option name="activationCmd"/>
-          <Option name="admUser"/>
-          <Option name="altAddress"/>
+          <Option name="activationCmd"></Option>
+          <Option name="admUser"></Option>
+          <Option name="altAddress"></Option>
           <Option name="check_shading">True</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
-          <Option name="cmdline"/>
-          <Option name="compiler"/>
+          <Option name="cmdline"></Option>
+          <Option name="compiler"></Option>
           <Option name="configure_interfaces">False</Option>
           <Option name="debug">False</Option>
           <Option name="dyn_addr">False</Option>
-          <Option name="epilog_script"/>
+          <Option name="epilog_script"></Option>
           <Option name="fallback_log">False</Option>
-          <Option name="firewall_dir"/>
+          <Option name="firewall_dir"></Option>
           <Option name="firewall_is_part_of_any">True</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
-          <Option name="freebsd_path_ipf"/>
-          <Option name="freebsd_path_ipnat"/>
-          <Option name="freebsd_path_sysctl"/>
+          <Option name="freebsd_path_ipf"></Option>
+          <Option name="freebsd_path_ipnat"></Option>
+          <Option name="freebsd_path_sysctl"></Option>
           <Option name="ignore_empty_groups">False</Option>
           <Option name="in_out_code">True</Option>
-          <Option name="inst_cmdline"/>
-          <Option name="inst_script"/>
-          <Option name="install_script"/>
+          <Option name="inst_cmdline"></Option>
+          <Option name="inst_script"></Option>
+          <Option name="install_script"></Option>
           <Option name="limit_suffix">/day</Option>
           <Option name="limit_value">0</Option>
           <Option name="linux24_ip_forward">0</Option>
@@ -11780,7 +11780,7 @@
           <Option name="log_level">debug</Option>
           <Option name="log_limit_suffix">/second</Option>
           <Option name="log_limit_value">0</Option>
-          <Option name="log_prefix"/>
+          <Option name="log_prefix"></Option>
           <Option name="log_tcp_opt">False</Option>
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">True</Option>
@@ -11789,9 +11789,9 @@
           <Option name="modulate_state">False</Option>
           <Option name="no_iochains_for_any">False</Option>
           <Option name="no_optimisation">False</Option>
-          <Option name="openbsd_path_pfctl"/>
-          <Option name="openbsd_path_sysctl"/>
-          <Option name="output_file"/>
+          <Option name="openbsd_path_pfctl"></Option>
+          <Option name="openbsd_path_sysctl"></Option>
+          <Option name="output_file"></Option>
           <Option name="pass_all_out">False</Option>
           <Option name="pf_adaptive_end">0</Option>
           <Option name="pf_adaptive_start">0</Option>
@@ -11810,7 +11810,7 @@
           <Option name="pf_limit_states">10000</Option>
           <Option name="pf_limit_table_entries">0</Option>
           <Option name="pf_limit_tables">0</Option>
-          <Option name="pf_optimization"/>
+          <Option name="pf_optimization"></Option>
           <Option name="pf_other_first">0</Option>
           <Option name="pf_other_multiple">0</Option>
           <Option name="pf_other_single">0</Option>
@@ -11851,13 +11851,13 @@
           <Option name="pf_udp_single">0</Option>
           <Option name="platform">iptables</Option>
           <Option name="prolog_place">fw_file</Option>
-          <Option name="prolog_script"/>
+          <Option name="prolog_script"></Option>
           <Option name="proxy_arp">False</Option>
-          <Option name="script_env_path"/>
-          <Option name="snmp_contact"/>
-          <Option name="snmp_description"/>
-          <Option name="snmp_location"/>
-          <Option name="sshArgs"/>
+          <Option name="script_env_path"></Option>
+          <Option name="snmp_contact"></Option>
+          <Option name="snmp_description"></Option>
+          <Option name="snmp_location"></Option>
+          <Option name="sshArgs"></Option>
           <Option name="use_ip_tool">False</Option>
           <Option name="use_numeric_log_levels">False</Option>
           <Option name="use_tables">True</Option>
@@ -11940,7 +11940,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -11961,17 +11961,17 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_keep_state">False</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_flush">False</Option>
               <Option name="pf_max_src_conn_rate_global">False</Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
-              <Option name="pf_max_src_conn_rate_overload_table"/>
+              <Option name="pf_max_src_conn_rate_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">0</Option>
               <Option name="pf_max_src_states">0</Option>
@@ -11997,17 +11997,17 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_keep_state">True</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_flush">False</Option>
               <Option name="pf_max_src_conn_rate_global">False</Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
-              <Option name="pf_max_src_conn_rate_overload_table"/>
+              <Option name="pf_max_src_conn_rate_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">0</Option>
               <Option name="pf_max_src_states">0</Option>
@@ -12033,7 +12033,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -12062,29 +12062,29 @@
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
           <Option name="action_on_reject">ICMP net unreachable</Option>
-          <Option name="activationCmd"/>
-          <Option name="admUser"/>
-          <Option name="altAddress"/>
+          <Option name="activationCmd"></Option>
+          <Option name="admUser"></Option>
+          <Option name="altAddress"></Option>
           <Option name="check_shading">True</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
-          <Option name="cmdline"/>
-          <Option name="compiler"/>
+          <Option name="cmdline"></Option>
+          <Option name="compiler"></Option>
           <Option name="configure_interfaces">False</Option>
           <Option name="debug">False</Option>
           <Option name="dyn_addr">False</Option>
-          <Option name="epilog_script"/>
+          <Option name="epilog_script"></Option>
           <Option name="fallback_log">False</Option>
-          <Option name="firewall_dir"/>
+          <Option name="firewall_dir"></Option>
           <Option name="firewall_is_part_of_any">True</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
-          <Option name="freebsd_path_ipf"/>
-          <Option name="freebsd_path_ipnat"/>
-          <Option name="freebsd_path_sysctl"/>
+          <Option name="freebsd_path_ipf"></Option>
+          <Option name="freebsd_path_ipnat"></Option>
+          <Option name="freebsd_path_sysctl"></Option>
           <Option name="ignore_empty_groups">False</Option>
           <Option name="in_out_code">True</Option>
-          <Option name="inst_cmdline"/>
-          <Option name="inst_script"/>
-          <Option name="install_script"/>
+          <Option name="inst_cmdline"></Option>
+          <Option name="inst_script"></Option>
+          <Option name="install_script"></Option>
           <Option name="limit_suffix">/day</Option>
           <Option name="limit_value">0</Option>
           <Option name="linux24_ip_forward">0</Option>
@@ -12096,7 +12096,7 @@
           <Option name="log_level">debug</Option>
           <Option name="log_limit_suffix">/second</Option>
           <Option name="log_limit_value">0</Option>
-          <Option name="log_prefix"/>
+          <Option name="log_prefix"></Option>
           <Option name="log_tcp_opt">False</Option>
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">True</Option>
@@ -12105,9 +12105,9 @@
           <Option name="modulate_state">False</Option>
           <Option name="no_iochains_for_any">False</Option>
           <Option name="no_optimisation">False</Option>
-          <Option name="openbsd_path_pfctl"/>
-          <Option name="openbsd_path_sysctl"/>
-          <Option name="output_file"/>
+          <Option name="openbsd_path_pfctl"></Option>
+          <Option name="openbsd_path_sysctl"></Option>
+          <Option name="output_file"></Option>
           <Option name="pass_all_out">False</Option>
           <Option name="pf_adaptive_end">0</Option>
           <Option name="pf_adaptive_start">0</Option>
@@ -12126,7 +12126,7 @@
           <Option name="pf_limit_states">10000</Option>
           <Option name="pf_limit_table_entries">0</Option>
           <Option name="pf_limit_tables">0</Option>
-          <Option name="pf_optimization"/>
+          <Option name="pf_optimization"></Option>
           <Option name="pf_other_first">0</Option>
           <Option name="pf_other_multiple">0</Option>
           <Option name="pf_other_single">0</Option>
@@ -12167,13 +12167,13 @@
           <Option name="pf_udp_single">0</Option>
           <Option name="platform">iptables</Option>
           <Option name="prolog_place">fw_file</Option>
-          <Option name="prolog_script"/>
+          <Option name="prolog_script"></Option>
           <Option name="proxy_arp">False</Option>
-          <Option name="script_env_path"/>
-          <Option name="snmp_contact"/>
-          <Option name="snmp_description"/>
-          <Option name="snmp_location"/>
-          <Option name="sshArgs"/>
+          <Option name="script_env_path"></Option>
+          <Option name="snmp_contact"></Option>
+          <Option name="snmp_description"></Option>
+          <Option name="snmp_location"></Option>
+          <Option name="sshArgs"></Option>
           <Option name="use_ip_tool">False</Option>
           <Option name="use_numeric_log_levels">False</Option>
           <Option name="use_tables">True</Option>
@@ -12255,17 +12255,17 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_keep_state">True</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_flush">False</Option>
               <Option name="pf_max_src_conn_rate_global">False</Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
-              <Option name="pf_max_src_conn_rate_overload_table"/>
+              <Option name="pf_max_src_conn_rate_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">0</Option>
               <Option name="pf_max_src_states">0</Option>
@@ -12292,7 +12292,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -12313,17 +12313,17 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_keep_state">False</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_flush">False</Option>
               <Option name="pf_max_src_conn_rate_global">False</Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
-              <Option name="pf_max_src_conn_rate_overload_table"/>
+              <Option name="pf_max_src_conn_rate_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">0</Option>
               <Option name="pf_max_src_states">0</Option>
@@ -12349,17 +12349,17 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_keep_state">True</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_flush">False</Option>
               <Option name="pf_max_src_conn_rate_global">False</Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
-              <Option name="pf_max_src_conn_rate_overload_table"/>
+              <Option name="pf_max_src_conn_rate_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">0</Option>
               <Option name="pf_max_src_states">0</Option>
@@ -12385,7 +12385,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -12414,29 +12414,29 @@
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
           <Option name="action_on_reject">ICMP net unreachable</Option>
-          <Option name="activationCmd"/>
-          <Option name="admUser"/>
-          <Option name="altAddress"/>
+          <Option name="activationCmd"></Option>
+          <Option name="admUser"></Option>
+          <Option name="altAddress"></Option>
           <Option name="check_shading">False</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
-          <Option name="cmdline"/>
-          <Option name="compiler"/>
+          <Option name="cmdline"></Option>
+          <Option name="compiler"></Option>
           <Option name="configure_interfaces">False</Option>
           <Option name="debug">False</Option>
           <Option name="dyn_addr">False</Option>
-          <Option name="epilog_script"/>
+          <Option name="epilog_script"></Option>
           <Option name="fallback_log">False</Option>
-          <Option name="firewall_dir"/>
+          <Option name="firewall_dir"></Option>
           <Option name="firewall_is_part_of_any">True</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
-          <Option name="freebsd_path_ipf"/>
-          <Option name="freebsd_path_ipnat"/>
-          <Option name="freebsd_path_sysctl"/>
+          <Option name="freebsd_path_ipf"></Option>
+          <Option name="freebsd_path_ipnat"></Option>
+          <Option name="freebsd_path_sysctl"></Option>
           <Option name="ignore_empty_groups">False</Option>
           <Option name="in_out_code">False</Option>
-          <Option name="inst_cmdline"/>
-          <Option name="inst_script"/>
-          <Option name="install_script"/>
+          <Option name="inst_cmdline"></Option>
+          <Option name="inst_script"></Option>
+          <Option name="install_script"></Option>
           <Option name="limit_suffix">/day</Option>
           <Option name="limit_value">0</Option>
           <Option name="linux24_ip_forward">0</Option>
@@ -12448,7 +12448,7 @@
           <Option name="log_level">debug</Option>
           <Option name="log_limit_suffix">/second</Option>
           <Option name="log_limit_value">0</Option>
-          <Option name="log_prefix"/>
+          <Option name="log_prefix"></Option>
           <Option name="log_tcp_opt">False</Option>
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">True</Option>
@@ -12457,9 +12457,9 @@
           <Option name="modulate_state">False</Option>
           <Option name="no_iochains_for_any">False</Option>
           <Option name="no_optimisation">False</Option>
-          <Option name="openbsd_path_pfctl"/>
-          <Option name="openbsd_path_sysctl"/>
-          <Option name="output_file"/>
+          <Option name="openbsd_path_pfctl"></Option>
+          <Option name="openbsd_path_sysctl"></Option>
+          <Option name="output_file"></Option>
           <Option name="pass_all_out">True</Option>
           <Option name="pf_adaptive_end">0</Option>
           <Option name="pf_adaptive_start">0</Option>
@@ -12478,7 +12478,7 @@
           <Option name="pf_limit_states">10000</Option>
           <Option name="pf_limit_table_entries">0</Option>
           <Option name="pf_limit_tables">0</Option>
-          <Option name="pf_optimization"/>
+          <Option name="pf_optimization"></Option>
           <Option name="pf_other_first">0</Option>
           <Option name="pf_other_multiple">0</Option>
           <Option name="pf_other_single">0</Option>
@@ -12519,13 +12519,13 @@
           <Option name="pf_udp_single">0</Option>
           <Option name="platform">iptables</Option>
           <Option name="prolog_place">fw_file</Option>
-          <Option name="prolog_script"/>
+          <Option name="prolog_script"></Option>
           <Option name="proxy_arp">False</Option>
-          <Option name="script_env_path"/>
-          <Option name="snmp_contact"/>
-          <Option name="snmp_description"/>
-          <Option name="snmp_location"/>
-          <Option name="sshArgs"/>
+          <Option name="script_env_path"></Option>
+          <Option name="snmp_contact"></Option>
+          <Option name="snmp_description"></Option>
+          <Option name="snmp_location"></Option>
+          <Option name="sshArgs"></Option>
           <Option name="use_ip_tool">False</Option>
           <Option name="use_numeric_log_levels">False</Option>
           <Option name="use_tables">True</Option>
@@ -12608,7 +12608,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -12629,17 +12629,17 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_keep_state">False</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_flush">False</Option>
               <Option name="pf_max_src_conn_rate_global">False</Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
-              <Option name="pf_max_src_conn_rate_overload_table"/>
+              <Option name="pf_max_src_conn_rate_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">0</Option>
               <Option name="pf_max_src_states">0</Option>
@@ -12665,17 +12665,17 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_keep_state">True</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_flush">False</Option>
               <Option name="pf_max_src_conn_rate_global">False</Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
-              <Option name="pf_max_src_conn_rate_overload_table"/>
+              <Option name="pf_max_src_conn_rate_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">0</Option>
               <Option name="pf_max_src_states">0</Option>
@@ -12701,7 +12701,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -12730,29 +12730,29 @@
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
           <Option name="action_on_reject">ICMP net unreachable</Option>
-          <Option name="activationCmd"/>
-          <Option name="admUser"/>
-          <Option name="altAddress"/>
+          <Option name="activationCmd"></Option>
+          <Option name="admUser"></Option>
+          <Option name="altAddress"></Option>
           <Option name="check_shading">True</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
-          <Option name="cmdline"/>
-          <Option name="compiler"/>
+          <Option name="cmdline"></Option>
+          <Option name="compiler"></Option>
           <Option name="configure_interfaces">False</Option>
           <Option name="debug">False</Option>
           <Option name="dyn_addr">False</Option>
-          <Option name="epilog_script"/>
+          <Option name="epilog_script"></Option>
           <Option name="fallback_log">False</Option>
-          <Option name="firewall_dir"/>
+          <Option name="firewall_dir"></Option>
           <Option name="firewall_is_part_of_any">True</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
-          <Option name="freebsd_path_ipf"/>
-          <Option name="freebsd_path_ipnat"/>
-          <Option name="freebsd_path_sysctl"/>
+          <Option name="freebsd_path_ipf"></Option>
+          <Option name="freebsd_path_ipnat"></Option>
+          <Option name="freebsd_path_sysctl"></Option>
           <Option name="ignore_empty_groups">False</Option>
           <Option name="in_out_code">False</Option>
-          <Option name="inst_cmdline"/>
-          <Option name="inst_script"/>
-          <Option name="install_script"/>
+          <Option name="inst_cmdline"></Option>
+          <Option name="inst_script"></Option>
+          <Option name="install_script"></Option>
           <Option name="limit_suffix">/day</Option>
           <Option name="limit_value">0</Option>
           <Option name="linux24_ip_forward">0</Option>
@@ -12764,7 +12764,7 @@
           <Option name="log_level">debug</Option>
           <Option name="log_limit_suffix">/second</Option>
           <Option name="log_limit_value">0</Option>
-          <Option name="log_prefix"/>
+          <Option name="log_prefix"></Option>
           <Option name="log_tcp_opt">False</Option>
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">True</Option>
@@ -12773,9 +12773,9 @@
           <Option name="modulate_state">False</Option>
           <Option name="no_iochains_for_any">False</Option>
           <Option name="no_optimisation">False</Option>
-          <Option name="openbsd_path_pfctl"/>
-          <Option name="openbsd_path_sysctl"/>
-          <Option name="output_file"/>
+          <Option name="openbsd_path_pfctl"></Option>
+          <Option name="openbsd_path_sysctl"></Option>
+          <Option name="output_file"></Option>
           <Option name="pass_all_out">True</Option>
           <Option name="pf_adaptive_end">0</Option>
           <Option name="pf_adaptive_start">0</Option>
@@ -12794,7 +12794,7 @@
           <Option name="pf_limit_states">10000</Option>
           <Option name="pf_limit_table_entries">0</Option>
           <Option name="pf_limit_tables">0</Option>
-          <Option name="pf_optimization"/>
+          <Option name="pf_optimization"></Option>
           <Option name="pf_other_first">0</Option>
           <Option name="pf_other_multiple">0</Option>
           <Option name="pf_other_single">0</Option>
@@ -12835,13 +12835,13 @@
           <Option name="pf_udp_single">0</Option>
           <Option name="platform">iptables</Option>
           <Option name="prolog_place">fw_file</Option>
-          <Option name="prolog_script"/>
+          <Option name="prolog_script"></Option>
           <Option name="proxy_arp">False</Option>
-          <Option name="script_env_path"/>
-          <Option name="snmp_contact"/>
-          <Option name="snmp_description"/>
-          <Option name="snmp_location"/>
-          <Option name="sshArgs"/>
+          <Option name="script_env_path"></Option>
+          <Option name="snmp_contact"></Option>
+          <Option name="snmp_description"></Option>
+          <Option name="snmp_location"></Option>
+          <Option name="sshArgs"></Option>
           <Option name="use_ip_tool">False</Option>
           <Option name="use_numeric_log_levels">False</Option>
           <Option name="use_tables">True</Option>
@@ -12923,37 +12923,37 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
-              <Option name="branch_anchor_name"/>
-              <Option name="branch_chain_name"/>
+              <Option name="action_on_reject"></Option>
+              <Option name="branch_anchor_name"></Option>
+              <Option name="branch_chain_name"></Option>
               <Option name="classification">False</Option>
-              <Option name="classify_str"/>
+              <Option name="classify_str"></Option>
               <Option name="color">#8BC065</Option>
-              <Option name="custom_str"/>
-              <Option name="ipf_route_opt_addr"/>
-              <Option name="ipf_route_opt_if"/>
+              <Option name="custom_str"></Option>
+              <Option name="ipf_route_opt_addr"></Option>
+              <Option name="ipf_route_opt_if"></Option>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"/>
-              <Option name="ipt_iif"/>
+              <Option name="ipt_gw"></Option>
+              <Option name="ipt_iif"></Option>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"/>
+              <Option name="ipt_oif"></Option>
               <Option name="ipt_tee">False</Option>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_keep_state">False</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_flush">False</Option>
               <Option name="pf_max_src_conn_rate_global">False</Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
-              <Option name="pf_max_src_conn_rate_overload_table"/>
+              <Option name="pf_max_src_conn_rate_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">0</Option>
               <Option name="pf_max_src_states">0</Option>
@@ -12964,7 +12964,7 @@
               <Option name="pf_rule_max_state">0</Option>
               <Option name="pf_source_tracking">False</Option>
               <Option name="routing">True</Option>
-              <Option name="rule_name_accounting"/>
+              <Option name="rule_name_accounting"></Option>
               <Option name="stateless">False</Option>
               <Option name="tagging">False</Option>
             </PolicyRuleOptions>
@@ -12986,37 +12986,37 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
-              <Option name="branch_anchor_name"/>
-              <Option name="branch_chain_name"/>
+              <Option name="action_on_reject"></Option>
+              <Option name="branch_anchor_name"></Option>
+              <Option name="branch_chain_name"></Option>
               <Option name="classification">False</Option>
-              <Option name="classify_str"/>
+              <Option name="classify_str"></Option>
               <Option name="color">#8BC065</Option>
-              <Option name="custom_str"/>
-              <Option name="ipf_route_opt_addr"/>
-              <Option name="ipf_route_opt_if"/>
+              <Option name="custom_str"></Option>
+              <Option name="ipf_route_opt_addr"></Option>
+              <Option name="ipf_route_opt_if"></Option>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"/>
-              <Option name="ipt_iif"/>
+              <Option name="ipt_gw"></Option>
+              <Option name="ipt_iif"></Option>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"/>
+              <Option name="ipt_oif"></Option>
               <Option name="ipt_tee">False</Option>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_keep_state">False</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_flush">False</Option>
               <Option name="pf_max_src_conn_rate_global">False</Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
-              <Option name="pf_max_src_conn_rate_overload_table"/>
+              <Option name="pf_max_src_conn_rate_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">0</Option>
               <Option name="pf_max_src_states">0</Option>
@@ -13027,7 +13027,7 @@
               <Option name="pf_rule_max_state">0</Option>
               <Option name="pf_source_tracking">False</Option>
               <Option name="routing">True</Option>
-              <Option name="rule_name_accounting"/>
+              <Option name="rule_name_accounting"></Option>
               <Option name="stateless">False</Option>
               <Option name="tagging">False</Option>
             </PolicyRuleOptions>
@@ -13049,37 +13049,37 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
-              <Option name="branch_anchor_name"/>
-              <Option name="branch_chain_name"/>
+              <Option name="action_on_reject"></Option>
+              <Option name="branch_anchor_name"></Option>
+              <Option name="branch_chain_name"></Option>
               <Option name="classification">False</Option>
-              <Option name="classify_str"/>
+              <Option name="classify_str"></Option>
               <Option name="color">#8BC065</Option>
-              <Option name="custom_str"/>
-              <Option name="ipf_route_opt_addr"/>
-              <Option name="ipf_route_opt_if"/>
+              <Option name="custom_str"></Option>
+              <Option name="ipf_route_opt_addr"></Option>
+              <Option name="ipf_route_opt_if"></Option>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"/>
-              <Option name="ipt_iif"/>
+              <Option name="ipt_gw"></Option>
+              <Option name="ipt_iif"></Option>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"/>
+              <Option name="ipt_oif"></Option>
               <Option name="ipt_tee">False</Option>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_keep_state">False</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_flush">False</Option>
               <Option name="pf_max_src_conn_rate_global">False</Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
-              <Option name="pf_max_src_conn_rate_overload_table"/>
+              <Option name="pf_max_src_conn_rate_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">0</Option>
               <Option name="pf_max_src_states">0</Option>
@@ -13090,7 +13090,7 @@
               <Option name="pf_rule_max_state">0</Option>
               <Option name="pf_source_tracking">False</Option>
               <Option name="routing">True</Option>
-              <Option name="rule_name_accounting"/>
+              <Option name="rule_name_accounting"></Option>
               <Option name="stateless">False</Option>
               <Option name="tagging">False</Option>
             </PolicyRuleOptions>
@@ -13112,37 +13112,37 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
-              <Option name="branch_anchor_name"/>
-              <Option name="branch_chain_name"/>
+              <Option name="action_on_reject"></Option>
+              <Option name="branch_anchor_name"></Option>
+              <Option name="branch_chain_name"></Option>
               <Option name="classification">False</Option>
-              <Option name="classify_str"/>
+              <Option name="classify_str"></Option>
               <Option name="color">#7694C0</Option>
-              <Option name="custom_str"/>
-              <Option name="ipf_route_opt_addr"/>
-              <Option name="ipf_route_opt_if"/>
+              <Option name="custom_str"></Option>
+              <Option name="ipf_route_opt_addr"></Option>
+              <Option name="ipf_route_opt_if"></Option>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"/>
-              <Option name="ipt_iif"/>
+              <Option name="ipt_gw"></Option>
+              <Option name="ipt_iif"></Option>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"/>
+              <Option name="ipt_oif"></Option>
               <Option name="ipt_tee">False</Option>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_keep_state">False</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_flush">False</Option>
               <Option name="pf_max_src_conn_rate_global">False</Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
-              <Option name="pf_max_src_conn_rate_overload_table"/>
+              <Option name="pf_max_src_conn_rate_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">0</Option>
               <Option name="pf_max_src_states">0</Option>
@@ -13153,7 +13153,7 @@
               <Option name="pf_rule_max_state">0</Option>
               <Option name="pf_source_tracking">False</Option>
               <Option name="routing">True</Option>
-              <Option name="rule_name_accounting"/>
+              <Option name="rule_name_accounting"></Option>
               <Option name="stateless">True</Option>
               <Option name="tagging">False</Option>
             </PolicyRuleOptions>
@@ -13175,37 +13175,37 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
-              <Option name="branch_anchor_name"/>
-              <Option name="branch_chain_name"/>
+              <Option name="action_on_reject"></Option>
+              <Option name="branch_anchor_name"></Option>
+              <Option name="branch_chain_name"></Option>
               <Option name="classification">False</Option>
-              <Option name="classify_str"/>
+              <Option name="classify_str"></Option>
               <Option name="color">#7694C0</Option>
-              <Option name="custom_str"/>
-              <Option name="ipf_route_opt_addr"/>
-              <Option name="ipf_route_opt_if"/>
+              <Option name="custom_str"></Option>
+              <Option name="ipf_route_opt_addr"></Option>
+              <Option name="ipf_route_opt_if"></Option>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"/>
-              <Option name="ipt_iif"/>
+              <Option name="ipt_gw"></Option>
+              <Option name="ipt_iif"></Option>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"/>
+              <Option name="ipt_oif"></Option>
               <Option name="ipt_tee">False</Option>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_keep_state">False</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_flush">False</Option>
               <Option name="pf_max_src_conn_rate_global">False</Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
-              <Option name="pf_max_src_conn_rate_overload_table"/>
+              <Option name="pf_max_src_conn_rate_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">0</Option>
               <Option name="pf_max_src_states">0</Option>
@@ -13216,7 +13216,7 @@
               <Option name="pf_rule_max_state">0</Option>
               <Option name="pf_source_tracking">False</Option>
               <Option name="routing">True</Option>
-              <Option name="rule_name_accounting"/>
+              <Option name="rule_name_accounting"></Option>
               <Option name="stateless">True</Option>
               <Option name="tagging">False</Option>
             </PolicyRuleOptions>
@@ -13238,37 +13238,37 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
-              <Option name="branch_anchor_name"/>
-              <Option name="branch_chain_name"/>
+              <Option name="action_on_reject"></Option>
+              <Option name="branch_anchor_name"></Option>
+              <Option name="branch_chain_name"></Option>
               <Option name="classification">False</Option>
-              <Option name="classify_str"/>
+              <Option name="classify_str"></Option>
               <Option name="color">#7694C0</Option>
-              <Option name="custom_str"/>
-              <Option name="ipf_route_opt_addr"/>
-              <Option name="ipf_route_opt_if"/>
+              <Option name="custom_str"></Option>
+              <Option name="ipf_route_opt_addr"></Option>
+              <Option name="ipf_route_opt_if"></Option>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"/>
-              <Option name="ipt_iif"/>
+              <Option name="ipt_gw"></Option>
+              <Option name="ipt_iif"></Option>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"/>
+              <Option name="ipt_oif"></Option>
               <Option name="ipt_tee">False</Option>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_keep_state">False</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_flush">False</Option>
               <Option name="pf_max_src_conn_rate_global">False</Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
-              <Option name="pf_max_src_conn_rate_overload_table"/>
+              <Option name="pf_max_src_conn_rate_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">0</Option>
               <Option name="pf_max_src_states">0</Option>
@@ -13279,7 +13279,7 @@
               <Option name="pf_rule_max_state">0</Option>
               <Option name="pf_source_tracking">False</Option>
               <Option name="routing">True</Option>
-              <Option name="rule_name_accounting"/>
+              <Option name="rule_name_accounting"></Option>
               <Option name="stateless">True</Option>
               <Option name="tagging">False</Option>
             </PolicyRuleOptions>
@@ -13301,37 +13301,37 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
-              <Option name="branch_anchor_name"/>
-              <Option name="branch_chain_name"/>
+              <Option name="action_on_reject"></Option>
+              <Option name="branch_anchor_name"></Option>
+              <Option name="branch_chain_name"></Option>
               <Option name="classification">False</Option>
-              <Option name="classify_str"/>
+              <Option name="classify_str"></Option>
               <Option name="color">#C0BA44</Option>
-              <Option name="custom_str"/>
-              <Option name="ipf_route_opt_addr"/>
-              <Option name="ipf_route_opt_if"/>
+              <Option name="custom_str"></Option>
+              <Option name="ipf_route_opt_addr"></Option>
+              <Option name="ipf_route_opt_if"></Option>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"/>
-              <Option name="ipt_iif"/>
+              <Option name="ipt_gw"></Option>
+              <Option name="ipt_iif"></Option>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"/>
+              <Option name="ipt_oif"></Option>
               <Option name="ipt_tee">False</Option>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_keep_state">False</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_flush">False</Option>
               <Option name="pf_max_src_conn_rate_global">False</Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
-              <Option name="pf_max_src_conn_rate_overload_table"/>
+              <Option name="pf_max_src_conn_rate_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">0</Option>
               <Option name="pf_max_src_states">0</Option>
@@ -13342,7 +13342,7 @@
               <Option name="pf_rule_max_state">0</Option>
               <Option name="pf_source_tracking">False</Option>
               <Option name="routing">True</Option>
-              <Option name="rule_name_accounting"/>
+              <Option name="rule_name_accounting"></Option>
               <Option name="stateless">False</Option>
               <Option name="tagging">False</Option>
             </PolicyRuleOptions>
@@ -13364,37 +13364,37 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
-              <Option name="branch_anchor_name"/>
-              <Option name="branch_chain_name"/>
+              <Option name="action_on_reject"></Option>
+              <Option name="branch_anchor_name"></Option>
+              <Option name="branch_chain_name"></Option>
               <Option name="classification">False</Option>
-              <Option name="classify_str"/>
+              <Option name="classify_str"></Option>
               <Option name="color">#C0BA44</Option>
-              <Option name="custom_str"/>
-              <Option name="ipf_route_opt_addr"/>
-              <Option name="ipf_route_opt_if"/>
+              <Option name="custom_str"></Option>
+              <Option name="ipf_route_opt_addr"></Option>
+              <Option name="ipf_route_opt_if"></Option>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"/>
-              <Option name="ipt_iif"/>
+              <Option name="ipt_gw"></Option>
+              <Option name="ipt_iif"></Option>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"/>
+              <Option name="ipt_oif"></Option>
               <Option name="ipt_tee">False</Option>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_keep_state">False</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_flush">False</Option>
               <Option name="pf_max_src_conn_rate_global">False</Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
-              <Option name="pf_max_src_conn_rate_overload_table"/>
+              <Option name="pf_max_src_conn_rate_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">0</Option>
               <Option name="pf_max_src_states">0</Option>
@@ -13405,7 +13405,7 @@
               <Option name="pf_rule_max_state">0</Option>
               <Option name="pf_source_tracking">False</Option>
               <Option name="routing">True</Option>
-              <Option name="rule_name_accounting"/>
+              <Option name="rule_name_accounting"></Option>
               <Option name="stateless">False</Option>
               <Option name="tagging">False</Option>
             </PolicyRuleOptions>
@@ -13427,37 +13427,37 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
-              <Option name="branch_anchor_name"/>
-              <Option name="branch_chain_name"/>
+              <Option name="action_on_reject"></Option>
+              <Option name="branch_anchor_name"></Option>
+              <Option name="branch_chain_name"></Option>
               <Option name="classification">False</Option>
-              <Option name="classify_str"/>
+              <Option name="classify_str"></Option>
               <Option name="color">#C0BA44</Option>
-              <Option name="custom_str"/>
-              <Option name="ipf_route_opt_addr"/>
-              <Option name="ipf_route_opt_if"/>
+              <Option name="custom_str"></Option>
+              <Option name="ipf_route_opt_addr"></Option>
+              <Option name="ipf_route_opt_if"></Option>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"/>
-              <Option name="ipt_iif"/>
+              <Option name="ipt_gw"></Option>
+              <Option name="ipt_iif"></Option>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"/>
+              <Option name="ipt_oif"></Option>
               <Option name="ipt_tee">False</Option>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_keep_state">False</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_flush">False</Option>
               <Option name="pf_max_src_conn_rate_global">False</Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
-              <Option name="pf_max_src_conn_rate_overload_table"/>
+              <Option name="pf_max_src_conn_rate_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">0</Option>
               <Option name="pf_max_src_states">0</Option>
@@ -13468,7 +13468,7 @@
               <Option name="pf_rule_max_state">0</Option>
               <Option name="pf_source_tracking">False</Option>
               <Option name="routing">True</Option>
-              <Option name="rule_name_accounting"/>
+              <Option name="rule_name_accounting"></Option>
               <Option name="stateless">False</Option>
               <Option name="tagging">False</Option>
             </PolicyRuleOptions>
@@ -13490,37 +13490,37 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
-              <Option name="branch_anchor_name"/>
-              <Option name="branch_chain_name"/>
+              <Option name="action_on_reject"></Option>
+              <Option name="branch_anchor_name"></Option>
+              <Option name="branch_chain_name"></Option>
               <Option name="classification">False</Option>
-              <Option name="classify_str"/>
+              <Option name="classify_str"></Option>
               <Option name="color">#C86E6E</Option>
-              <Option name="custom_str"/>
-              <Option name="ipf_route_opt_addr"/>
-              <Option name="ipf_route_opt_if"/>
+              <Option name="custom_str"></Option>
+              <Option name="ipf_route_opt_addr"></Option>
+              <Option name="ipf_route_opt_if"></Option>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"/>
-              <Option name="ipt_iif"/>
+              <Option name="ipt_gw"></Option>
+              <Option name="ipt_iif"></Option>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"/>
+              <Option name="ipt_oif"></Option>
               <Option name="ipt_tee">False</Option>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_keep_state">False</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_flush">False</Option>
               <Option name="pf_max_src_conn_rate_global">False</Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
-              <Option name="pf_max_src_conn_rate_overload_table"/>
+              <Option name="pf_max_src_conn_rate_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">0</Option>
               <Option name="pf_max_src_states">0</Option>
@@ -13531,7 +13531,7 @@
               <Option name="pf_rule_max_state">0</Option>
               <Option name="pf_source_tracking">False</Option>
               <Option name="routing">True</Option>
-              <Option name="rule_name_accounting"/>
+              <Option name="rule_name_accounting"></Option>
               <Option name="stateless">False</Option>
               <Option name="tagging">False</Option>
             </PolicyRuleOptions>
@@ -13553,37 +13553,37 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
-              <Option name="branch_anchor_name"/>
-              <Option name="branch_chain_name"/>
+              <Option name="action_on_reject"></Option>
+              <Option name="branch_anchor_name"></Option>
+              <Option name="branch_chain_name"></Option>
               <Option name="classification">False</Option>
-              <Option name="classify_str"/>
+              <Option name="classify_str"></Option>
               <Option name="color">#C86E6E</Option>
-              <Option name="custom_str"/>
-              <Option name="ipf_route_opt_addr"/>
-              <Option name="ipf_route_opt_if"/>
+              <Option name="custom_str"></Option>
+              <Option name="ipf_route_opt_addr"></Option>
+              <Option name="ipf_route_opt_if"></Option>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"/>
-              <Option name="ipt_iif"/>
+              <Option name="ipt_gw"></Option>
+              <Option name="ipt_iif"></Option>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"/>
+              <Option name="ipt_oif"></Option>
               <Option name="ipt_tee">False</Option>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_keep_state">False</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_flush">False</Option>
               <Option name="pf_max_src_conn_rate_global">False</Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
-              <Option name="pf_max_src_conn_rate_overload_table"/>
+              <Option name="pf_max_src_conn_rate_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">0</Option>
               <Option name="pf_max_src_states">0</Option>
@@ -13594,7 +13594,7 @@
               <Option name="pf_rule_max_state">0</Option>
               <Option name="pf_source_tracking">False</Option>
               <Option name="routing">True</Option>
-              <Option name="rule_name_accounting"/>
+              <Option name="rule_name_accounting"></Option>
               <Option name="stateless">False</Option>
               <Option name="tagging">False</Option>
             </PolicyRuleOptions>
@@ -13616,37 +13616,37 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
-              <Option name="branch_anchor_name"/>
-              <Option name="branch_chain_name"/>
+              <Option name="action_on_reject"></Option>
+              <Option name="branch_anchor_name"></Option>
+              <Option name="branch_chain_name"></Option>
               <Option name="classification">False</Option>
-              <Option name="classify_str"/>
+              <Option name="classify_str"></Option>
               <Option name="color">#C86E6E</Option>
-              <Option name="custom_str"/>
-              <Option name="ipf_route_opt_addr"/>
-              <Option name="ipf_route_opt_if"/>
+              <Option name="custom_str"></Option>
+              <Option name="ipf_route_opt_addr"></Option>
+              <Option name="ipf_route_opt_if"></Option>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"/>
-              <Option name="ipt_iif"/>
+              <Option name="ipt_gw"></Option>
+              <Option name="ipt_iif"></Option>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"/>
+              <Option name="ipt_oif"></Option>
               <Option name="ipt_tee">False</Option>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_keep_state">False</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_flush">False</Option>
               <Option name="pf_max_src_conn_rate_global">False</Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
-              <Option name="pf_max_src_conn_rate_overload_table"/>
+              <Option name="pf_max_src_conn_rate_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">0</Option>
               <Option name="pf_max_src_states">0</Option>
@@ -13657,7 +13657,7 @@
               <Option name="pf_rule_max_state">0</Option>
               <Option name="pf_source_tracking">False</Option>
               <Option name="routing">True</Option>
-              <Option name="rule_name_accounting"/>
+              <Option name="rule_name_accounting"></Option>
               <Option name="stateless">False</Option>
               <Option name="tagging">False</Option>
             </PolicyRuleOptions>
@@ -13682,37 +13682,37 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
-              <Option name="branch_anchor_name"/>
-              <Option name="branch_chain_name"/>
+              <Option name="action_on_reject"></Option>
+              <Option name="branch_anchor_name"></Option>
+              <Option name="branch_chain_name"></Option>
               <Option name="classification">False</Option>
-              <Option name="classify_str"/>
+              <Option name="classify_str"></Option>
               <Option name="color">#8BC065</Option>
-              <Option name="custom_str"/>
-              <Option name="ipf_route_opt_addr"/>
-              <Option name="ipf_route_opt_if"/>
+              <Option name="custom_str"></Option>
+              <Option name="ipf_route_opt_addr"></Option>
+              <Option name="ipf_route_opt_if"></Option>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"/>
-              <Option name="ipt_iif"/>
+              <Option name="ipt_gw"></Option>
+              <Option name="ipt_iif"></Option>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"/>
+              <Option name="ipt_oif"></Option>
               <Option name="ipt_tee">False</Option>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_keep_state">False</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_flush">False</Option>
               <Option name="pf_max_src_conn_rate_global">False</Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
-              <Option name="pf_max_src_conn_rate_overload_table"/>
+              <Option name="pf_max_src_conn_rate_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">0</Option>
               <Option name="pf_max_src_states">0</Option>
@@ -13723,7 +13723,7 @@
               <Option name="pf_rule_max_state">0</Option>
               <Option name="pf_source_tracking">False</Option>
               <Option name="routing">True</Option>
-              <Option name="rule_name_accounting"/>
+              <Option name="rule_name_accounting"></Option>
               <Option name="stateless">False</Option>
               <Option name="tagging">False</Option>
             </PolicyRuleOptions>
@@ -13745,48 +13745,48 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
-              <Option name="branch_anchor_name"/>
-              <Option name="branch_chain_name"/>
+              <Option name="action_on_reject"></Option>
+              <Option name="branch_anchor_name"></Option>
+              <Option name="branch_chain_name"></Option>
               <Option name="classification">False</Option>
-              <Option name="classify_str"/>
+              <Option name="classify_str"></Option>
               <Option name="color">#8BC065</Option>
-              <Option name="custom_str"/>
-              <Option name="ipf_route_opt_addr"/>
-              <Option name="ipf_route_opt_if"/>
+              <Option name="custom_str"></Option>
+              <Option name="ipf_route_opt_addr"></Option>
+              <Option name="ipf_route_opt_if"></Option>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"/>
-              <Option name="ipt_iif"/>
+              <Option name="ipt_gw"></Option>
+              <Option name="ipt_iif"></Option>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"/>
+              <Option name="ipt_oif"></Option>
               <Option name="ipt_tee">False</Option>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_keep_state">False</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_flush">False</Option>
               <Option name="pf_max_src_conn_rate_global">False</Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
-              <Option name="pf_max_src_conn_rate_overload_table"/>
+              <Option name="pf_max_src_conn_rate_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">0</Option>
               <Option name="pf_max_src_states">0</Option>
               <Option name="pf_route_load_option">random</Option>
               <Option name="pf_route_opt_addr">192.0.2.1</Option>
-              <Option name="pf_route_opt_if"/>
+              <Option name="pf_route_opt_if"></Option>
               <Option name="pf_route_option">route_reply_through</Option>
               <Option name="pf_rule_max_state">0</Option>
               <Option name="pf_source_tracking">False</Option>
               <Option name="routing">True</Option>
-              <Option name="rule_name_accounting"/>
+              <Option name="rule_name_accounting"></Option>
               <Option name="stateless">False</Option>
               <Option name="tagging">False</Option>
             </PolicyRuleOptions>
@@ -13808,48 +13808,48 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
-              <Option name="branch_anchor_name"/>
-              <Option name="branch_chain_name"/>
+              <Option name="action_on_reject"></Option>
+              <Option name="branch_anchor_name"></Option>
+              <Option name="branch_chain_name"></Option>
               <Option name="classification">False</Option>
-              <Option name="classify_str"/>
+              <Option name="classify_str"></Option>
               <Option name="color">#8BC065</Option>
-              <Option name="custom_str"/>
-              <Option name="ipf_route_opt_addr"/>
-              <Option name="ipf_route_opt_if"/>
+              <Option name="custom_str"></Option>
+              <Option name="ipf_route_opt_addr"></Option>
+              <Option name="ipf_route_opt_if"></Option>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"/>
-              <Option name="ipt_iif"/>
+              <Option name="ipt_gw"></Option>
+              <Option name="ipt_iif"></Option>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"/>
+              <Option name="ipt_oif"></Option>
               <Option name="ipt_tee">False</Option>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_keep_state">False</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_flush">False</Option>
               <Option name="pf_max_src_conn_rate_global">False</Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
-              <Option name="pf_max_src_conn_rate_overload_table"/>
+              <Option name="pf_max_src_conn_rate_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">0</Option>
               <Option name="pf_max_src_states">0</Option>
               <Option name="pf_route_load_option">random</Option>
               <Option name="pf_route_opt_addr">192.0.2.1</Option>
-              <Option name="pf_route_opt_if"/>
+              <Option name="pf_route_opt_if"></Option>
               <Option name="pf_route_option">route_copy_through</Option>
               <Option name="pf_rule_max_state">0</Option>
               <Option name="pf_source_tracking">False</Option>
               <Option name="routing">True</Option>
-              <Option name="rule_name_accounting"/>
+              <Option name="rule_name_accounting"></Option>
               <Option name="stateless">False</Option>
               <Option name="tagging">False</Option>
             </PolicyRuleOptions>
@@ -13871,48 +13871,48 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
-              <Option name="branch_anchor_name"/>
-              <Option name="branch_chain_name"/>
+              <Option name="action_on_reject"></Option>
+              <Option name="branch_anchor_name"></Option>
+              <Option name="branch_chain_name"></Option>
               <Option name="classification">False</Option>
-              <Option name="classify_str"/>
+              <Option name="classify_str"></Option>
               <Option name="color">#8BC065</Option>
-              <Option name="custom_str"/>
-              <Option name="ipf_route_opt_addr"/>
-              <Option name="ipf_route_opt_if"/>
+              <Option name="custom_str"></Option>
+              <Option name="ipf_route_opt_addr"></Option>
+              <Option name="ipf_route_opt_if"></Option>
               <Option name="ipf_route_option">route_reply_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"/>
-              <Option name="ipt_iif"/>
+              <Option name="ipt_gw"></Option>
+              <Option name="ipt_iif"></Option>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"/>
+              <Option name="ipt_oif"></Option>
               <Option name="ipt_tee">False</Option>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_fastroute">True</Option>
               <Option name="pf_keep_state">False</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_flush">False</Option>
               <Option name="pf_max_src_conn_rate_global">False</Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
-              <Option name="pf_max_src_conn_rate_overload_table"/>
+              <Option name="pf_max_src_conn_rate_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">0</Option>
               <Option name="pf_max_src_states">0</Option>
               <Option name="pf_route_load_option">random</Option>
               <Option name="pf_route_opt_addr">192.0.2.1,192.0.2.2,192.0.2.3</Option>
-              <Option name="pf_route_opt_if"/>
+              <Option name="pf_route_opt_if"></Option>
               <Option name="pf_route_option">none</Option>
               <Option name="pf_rule_max_state">0</Option>
               <Option name="pf_source_tracking">False</Option>
               <Option name="routing">True</Option>
-              <Option name="rule_name_accounting"/>
+              <Option name="rule_name_accounting"></Option>
               <Option name="stateless">False</Option>
               <Option name="tagging">False</Option>
             </PolicyRuleOptions>
@@ -13934,48 +13934,48 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
-              <Option name="branch_anchor_name"/>
-              <Option name="branch_chain_name"/>
+              <Option name="action_on_reject"></Option>
+              <Option name="branch_anchor_name"></Option>
+              <Option name="branch_chain_name"></Option>
               <Option name="classification">False</Option>
-              <Option name="classify_str"/>
+              <Option name="classify_str"></Option>
               <Option name="color">#8BC065</Option>
-              <Option name="custom_str"/>
-              <Option name="ipf_route_opt_addr"/>
-              <Option name="ipf_route_opt_if"/>
+              <Option name="custom_str"></Option>
+              <Option name="ipf_route_opt_addr"></Option>
+              <Option name="ipf_route_opt_if"></Option>
               <Option name="ipf_route_option">route_reply_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"/>
-              <Option name="ipt_iif"/>
+              <Option name="ipt_gw"></Option>
+              <Option name="ipt_iif"></Option>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"/>
+              <Option name="ipt_oif"></Option>
               <Option name="ipt_tee">False</Option>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_fastroute">True</Option>
               <Option name="pf_keep_state">False</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_flush">False</Option>
               <Option name="pf_max_src_conn_rate_global">False</Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
-              <Option name="pf_max_src_conn_rate_overload_table"/>
+              <Option name="pf_max_src_conn_rate_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">0</Option>
               <Option name="pf_max_src_states">0</Option>
               <Option name="pf_route_load_option">random</Option>
               <Option name="pf_route_opt_addr">192.0.2.1</Option>
-              <Option name="pf_route_opt_if"/>
+              <Option name="pf_route_opt_if"></Option>
               <Option name="pf_route_option">none</Option>
               <Option name="pf_rule_max_state">0</Option>
               <Option name="pf_source_tracking">False</Option>
               <Option name="routing">True</Option>
-              <Option name="rule_name_accounting"/>
+              <Option name="rule_name_accounting"></Option>
               <Option name="stateless">False</Option>
               <Option name="tagging">False</Option>
             </PolicyRuleOptions>
@@ -13997,48 +13997,48 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
-              <Option name="branch_anchor_name"/>
-              <Option name="branch_chain_name"/>
+              <Option name="action_on_reject"></Option>
+              <Option name="branch_anchor_name"></Option>
+              <Option name="branch_chain_name"></Option>
               <Option name="classification">False</Option>
-              <Option name="classify_str"/>
+              <Option name="classify_str"></Option>
               <Option name="color">#8BC065</Option>
-              <Option name="custom_str"/>
-              <Option name="ipf_route_opt_addr"/>
-              <Option name="ipf_route_opt_if"/>
+              <Option name="custom_str"></Option>
+              <Option name="ipf_route_opt_addr"></Option>
+              <Option name="ipf_route_opt_if"></Option>
               <Option name="ipf_route_option">route_reply_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"/>
-              <Option name="ipt_iif"/>
+              <Option name="ipt_gw"></Option>
+              <Option name="ipt_iif"></Option>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"/>
+              <Option name="ipt_oif"></Option>
               <Option name="ipt_tee">False</Option>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_fastroute">True</Option>
               <Option name="pf_keep_state">False</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_flush">False</Option>
               <Option name="pf_max_src_conn_rate_global">False</Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
-              <Option name="pf_max_src_conn_rate_overload_table"/>
+              <Option name="pf_max_src_conn_rate_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">0</Option>
               <Option name="pf_max_src_states">0</Option>
               <Option name="pf_route_load_option">random</Option>
               <Option name="pf_route_opt_addr">192.0.2.1</Option>
-              <Option name="pf_route_opt_if"/>
+              <Option name="pf_route_opt_if"></Option>
               <Option name="pf_route_option">none</Option>
               <Option name="pf_rule_max_state">0</Option>
               <Option name="pf_source_tracking">False</Option>
               <Option name="routing">True</Option>
-              <Option name="rule_name_accounting"/>
+              <Option name="rule_name_accounting"></Option>
               <Option name="stateless">False</Option>
               <Option name="tagging">False</Option>
             </PolicyRuleOptions>
@@ -14060,48 +14060,48 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
-              <Option name="branch_anchor_name"/>
-              <Option name="branch_chain_name"/>
+              <Option name="action_on_reject"></Option>
+              <Option name="branch_anchor_name"></Option>
+              <Option name="branch_chain_name"></Option>
               <Option name="classification">False</Option>
-              <Option name="classify_str"/>
+              <Option name="classify_str"></Option>
               <Option name="color">#8BC065</Option>
-              <Option name="custom_str"/>
-              <Option name="ipf_route_opt_addr"/>
-              <Option name="ipf_route_opt_if"/>
+              <Option name="custom_str"></Option>
+              <Option name="ipf_route_opt_addr"></Option>
+              <Option name="ipf_route_opt_if"></Option>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"/>
-              <Option name="ipt_iif"/>
+              <Option name="ipt_gw"></Option>
+              <Option name="ipt_iif"></Option>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"/>
+              <Option name="ipt_oif"></Option>
               <Option name="ipt_tee">False</Option>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_keep_state">False</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_flush">False</Option>
               <Option name="pf_max_src_conn_rate_global">False</Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
-              <Option name="pf_max_src_conn_rate_overload_table"/>
+              <Option name="pf_max_src_conn_rate_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">0</Option>
               <Option name="pf_max_src_states">0</Option>
               <Option name="pf_route_load_option">none</Option>
               <Option name="pf_route_opt_addr">192.0.2.1,192.0.2.2,192.0.2.3</Option>
-              <Option name="pf_route_opt_if"/>
+              <Option name="pf_route_opt_if"></Option>
               <Option name="pf_route_option">route_through</Option>
               <Option name="pf_rule_max_state">0</Option>
               <Option name="pf_source_tracking">False</Option>
               <Option name="routing">True</Option>
-              <Option name="rule_name_accounting"/>
+              <Option name="rule_name_accounting"></Option>
               <Option name="stateless">False</Option>
               <Option name="tagging">False</Option>
             </PolicyRuleOptions>
@@ -14123,48 +14123,48 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
-              <Option name="branch_anchor_name"/>
-              <Option name="branch_chain_name"/>
+              <Option name="action_on_reject"></Option>
+              <Option name="branch_anchor_name"></Option>
+              <Option name="branch_chain_name"></Option>
               <Option name="classification">False</Option>
-              <Option name="classify_str"/>
+              <Option name="classify_str"></Option>
               <Option name="color">#8BC065</Option>
-              <Option name="custom_str"/>
-              <Option name="ipf_route_opt_addr"/>
-              <Option name="ipf_route_opt_if"/>
+              <Option name="custom_str"></Option>
+              <Option name="ipf_route_opt_addr"></Option>
+              <Option name="ipf_route_opt_if"></Option>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"/>
-              <Option name="ipt_iif"/>
+              <Option name="ipt_gw"></Option>
+              <Option name="ipt_iif"></Option>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"/>
+              <Option name="ipt_oif"></Option>
               <Option name="ipt_tee">False</Option>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_keep_state">False</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_flush">False</Option>
               <Option name="pf_max_src_conn_rate_global">False</Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
-              <Option name="pf_max_src_conn_rate_overload_table"/>
+              <Option name="pf_max_src_conn_rate_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">0</Option>
               <Option name="pf_max_src_states">0</Option>
               <Option name="pf_route_load_option">bitmask</Option>
               <Option name="pf_route_opt_addr">192.0.2.1,192.0.2.2,192.0.2.3</Option>
-              <Option name="pf_route_opt_if"/>
+              <Option name="pf_route_opt_if"></Option>
               <Option name="pf_route_option">route_through</Option>
               <Option name="pf_rule_max_state">0</Option>
               <Option name="pf_source_tracking">False</Option>
               <Option name="routing">True</Option>
-              <Option name="rule_name_accounting"/>
+              <Option name="rule_name_accounting"></Option>
               <Option name="stateless">False</Option>
               <Option name="tagging">False</Option>
             </PolicyRuleOptions>
@@ -14186,48 +14186,48 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
-              <Option name="branch_anchor_name"/>
-              <Option name="branch_chain_name"/>
+              <Option name="action_on_reject"></Option>
+              <Option name="branch_anchor_name"></Option>
+              <Option name="branch_chain_name"></Option>
               <Option name="classification">False</Option>
-              <Option name="classify_str"/>
+              <Option name="classify_str"></Option>
               <Option name="color">#8BC065</Option>
-              <Option name="custom_str"/>
-              <Option name="ipf_route_opt_addr"/>
-              <Option name="ipf_route_opt_if"/>
+              <Option name="custom_str"></Option>
+              <Option name="ipf_route_opt_addr"></Option>
+              <Option name="ipf_route_opt_if"></Option>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"/>
-              <Option name="ipt_iif"/>
+              <Option name="ipt_gw"></Option>
+              <Option name="ipt_iif"></Option>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"/>
+              <Option name="ipt_oif"></Option>
               <Option name="ipt_tee">False</Option>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_keep_state">False</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_flush">False</Option>
               <Option name="pf_max_src_conn_rate_global">False</Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
-              <Option name="pf_max_src_conn_rate_overload_table"/>
+              <Option name="pf_max_src_conn_rate_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">0</Option>
               <Option name="pf_max_src_states">0</Option>
               <Option name="pf_route_load_option">random</Option>
               <Option name="pf_route_opt_addr">192.0.2.1,192.0.2.2,192.0.2.3</Option>
-              <Option name="pf_route_opt_if"/>
+              <Option name="pf_route_opt_if"></Option>
               <Option name="pf_route_option">route_through</Option>
               <Option name="pf_rule_max_state">0</Option>
               <Option name="pf_source_tracking">False</Option>
               <Option name="routing">True</Option>
-              <Option name="rule_name_accounting"/>
+              <Option name="rule_name_accounting"></Option>
               <Option name="stateless">False</Option>
               <Option name="tagging">False</Option>
             </PolicyRuleOptions>
@@ -14249,48 +14249,48 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
-              <Option name="branch_anchor_name"/>
-              <Option name="branch_chain_name"/>
+              <Option name="action_on_reject"></Option>
+              <Option name="branch_anchor_name"></Option>
+              <Option name="branch_chain_name"></Option>
               <Option name="classification">False</Option>
-              <Option name="classify_str"/>
+              <Option name="classify_str"></Option>
               <Option name="color">#8BC065</Option>
-              <Option name="custom_str"/>
-              <Option name="ipf_route_opt_addr"/>
-              <Option name="ipf_route_opt_if"/>
+              <Option name="custom_str"></Option>
+              <Option name="ipf_route_opt_addr"></Option>
+              <Option name="ipf_route_opt_if"></Option>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"/>
-              <Option name="ipt_iif"/>
+              <Option name="ipt_gw"></Option>
+              <Option name="ipt_iif"></Option>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"/>
+              <Option name="ipt_oif"></Option>
               <Option name="ipt_tee">False</Option>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_keep_state">False</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_flush">False</Option>
               <Option name="pf_max_src_conn_rate_global">False</Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
-              <Option name="pf_max_src_conn_rate_overload_table"/>
+              <Option name="pf_max_src_conn_rate_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">0</Option>
               <Option name="pf_max_src_states">0</Option>
               <Option name="pf_route_load_option">source_hash</Option>
               <Option name="pf_route_opt_addr">192.0.2.1,192.0.2.2,192.0.2.3</Option>
-              <Option name="pf_route_opt_if"/>
+              <Option name="pf_route_opt_if"></Option>
               <Option name="pf_route_option">route_through</Option>
               <Option name="pf_rule_max_state">0</Option>
               <Option name="pf_source_tracking">False</Option>
               <Option name="routing">True</Option>
-              <Option name="rule_name_accounting"/>
+              <Option name="rule_name_accounting"></Option>
               <Option name="stateless">False</Option>
               <Option name="tagging">False</Option>
             </PolicyRuleOptions>
@@ -14312,48 +14312,48 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
-              <Option name="branch_anchor_name"/>
-              <Option name="branch_chain_name"/>
+              <Option name="action_on_reject"></Option>
+              <Option name="branch_anchor_name"></Option>
+              <Option name="branch_chain_name"></Option>
               <Option name="classification">False</Option>
-              <Option name="classify_str"/>
+              <Option name="classify_str"></Option>
               <Option name="color">#8BC065</Option>
-              <Option name="custom_str"/>
-              <Option name="ipf_route_opt_addr"/>
-              <Option name="ipf_route_opt_if"/>
+              <Option name="custom_str"></Option>
+              <Option name="ipf_route_opt_addr"></Option>
+              <Option name="ipf_route_opt_if"></Option>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"/>
-              <Option name="ipt_iif"/>
+              <Option name="ipt_gw"></Option>
+              <Option name="ipt_iif"></Option>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"/>
+              <Option name="ipt_oif"></Option>
               <Option name="ipt_tee">False</Option>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_keep_state">False</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_flush">False</Option>
               <Option name="pf_max_src_conn_rate_global">False</Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
-              <Option name="pf_max_src_conn_rate_overload_table"/>
+              <Option name="pf_max_src_conn_rate_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">0</Option>
               <Option name="pf_max_src_states">0</Option>
               <Option name="pf_route_load_option">round_robin</Option>
               <Option name="pf_route_opt_addr">192.0.2.1,192.0.2.2,192.0.2.3</Option>
-              <Option name="pf_route_opt_if"/>
+              <Option name="pf_route_opt_if"></Option>
               <Option name="pf_route_option">route_through</Option>
               <Option name="pf_rule_max_state">0</Option>
               <Option name="pf_source_tracking">False</Option>
               <Option name="routing">True</Option>
-              <Option name="rule_name_accounting"/>
+              <Option name="rule_name_accounting"></Option>
               <Option name="stateless">False</Option>
               <Option name="tagging">False</Option>
             </PolicyRuleOptions>
@@ -14375,7 +14375,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -14408,23 +14408,23 @@
         <FirewallOptions>
           <Option name="accept_established">true</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
-          <Option name="activationCmd"/>
-          <Option name="admUser"/>
-          <Option name="altAddress"/>
+          <Option name="activationCmd"></Option>
+          <Option name="admUser"></Option>
+          <Option name="altAddress"></Option>
           <Option name="check_shading">True</Option>
-          <Option name="cmdline"/>
-          <Option name="compiler"/>
+          <Option name="cmdline"></Option>
+          <Option name="compiler"></Option>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="eliminate_duplicates">true</Option>
-          <Option name="epilog_script"/>
+          <Option name="epilog_script"></Option>
           <Option name="fallback_log">False</Option>
           <Option name="firewall_dir">/etc</Option>
           <Option name="firewall_is_part_of_any_and_networks">true</Option>
           <Option name="freebsd_ip_forward">1</Option>
           <Option name="ignore_empty_groups">False</Option>
           <Option name="in_out_code">True</Option>
-          <Option name="ipt_mangle_only_rulesets"/>
+          <Option name="ipt_mangle_only_rulesets"></Option>
           <Option name="limit_value">0</Option>
           <Option name="linux24_ip_forward">1</Option>
           <Option name="load_modules">true</Option>
@@ -14434,11 +14434,11 @@
           <Option name="loopback_interface">lo0</Option>
           <Option name="macosx_ip_forward">1</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"/>
+          <Option name="mgmt_addr"></Option>
           <Option name="mgmt_ssh">False</Option>
           <Option name="modulate_state">True</Option>
           <Option name="openbsd_ip_forward">1</Option>
-          <Option name="output_file"/>
+          <Option name="output_file"></Option>
           <Option name="pass_all_out">False</Option>
           <Option name="pf_adaptive_end">0</Option>
           <Option name="pf_adaptive_start">0</Option>
@@ -14451,7 +14451,7 @@
           <Option name="pf_icmp_first">0</Option>
           <Option name="pf_limit_frags">5000</Option>
           <Option name="pf_limit_states">10000</Option>
-          <Option name="pf_optimization"/>
+          <Option name="pf_optimization"></Option>
           <Option name="pf_other_first">0</Option>
           <Option name="pf_other_multiple">0</Option>
           <Option name="pf_other_single">0</Option>
@@ -14502,11 +14502,11 @@
           <Option name="pix_security_fragguard_supported">true</Option>
           <Option name="pix_syslog_device_id_supported">false</Option>
           <Option name="pix_use_acl_remarks">true</Option>
-          <Option name="prolog_script"/>
+          <Option name="prolog_script"></Option>
           <Option name="prompt1">$ </Option>
           <Option name="prompt2"> # </Option>
           <Option name="solaris_ip_forward">1</Option>
-          <Option name="sshArgs"/>
+          <Option name="sshArgs"></Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="verify_interfaces">true</Option>
         </FirewallOptions>
@@ -14533,7 +14533,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -14554,7 +14554,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -14578,7 +14578,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -14599,7 +14599,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -14620,7 +14620,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -14641,7 +14641,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -14662,7 +14662,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -14683,7 +14683,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -14704,7 +14704,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -14725,7 +14725,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -14746,7 +14746,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -14767,7 +14767,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -14788,7 +14788,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -14809,7 +14809,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -14836,17 +14836,17 @@
         <FirewallOptions>
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
-          <Option name="action_on_reject"/>
-          <Option name="activationCmd"/>
+          <Option name="action_on_reject"></Option>
+          <Option name="activationCmd"></Option>
           <Option name="add_check_state_rule">true</Option>
-          <Option name="admUser"/>
-          <Option name="altAddress"/>
+          <Option name="admUser"></Option>
+          <Option name="altAddress"></Option>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">True</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
           <Option name="classify_mark_terminating">False</Option>
           <Option name="cmdline">-xt</Option>
-          <Option name="compiler"/>
+          <Option name="compiler"></Option>
           <Option name="conf_file_name_on_firewall">/etc/fw/pf-ipv6.conf</Option>
           <Option name="configure_carp_interfaces">False</Option>
           <Option name="configure_interfaces">True</Option>
@@ -14856,18 +14856,18 @@
           <Option name="drop_invalid">False</Option>
           <Option name="eliminate_duplicates">true</Option>
           <Option name="enable_ipv6">True</Option>
-          <Option name="epilog_script"/>
+          <Option name="epilog_script"></Option>
           <Option name="fallback_log">False</Option>
           <Option name="firewall_dir">/etc</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="freebsd_ip_forward">1</Option>
-          <Option name="freebsd_ip_redirect"/>
-          <Option name="freebsd_ip_sourceroute"/>
+          <Option name="freebsd_ip_redirect"></Option>
+          <Option name="freebsd_ip_sourceroute"></Option>
           <Option name="freebsd_ipv6_forward">1</Option>
-          <Option name="freebsd_path_ipf"/>
-          <Option name="freebsd_path_ipfw"/>
-          <Option name="freebsd_path_ipnat"/>
-          <Option name="freebsd_path_sysctl"/>
+          <Option name="freebsd_path_ipf"></Option>
+          <Option name="freebsd_path_ipfw"></Option>
+          <Option name="freebsd_path_ipnat"></Option>
+          <Option name="freebsd_path_sysctl"></Option>
           <Option name="generate_shell_script">True</Option>
           <Option name="ignore_empty_groups">False</Option>
           <Option name="in_out_code">True</Option>
@@ -14875,7 +14875,7 @@
           <Option name="iosacl_assume_fw_part_of_any">true</Option>
           <Option name="iosacl_include_comments">true</Option>
           <Option name="ipv4_6_order">ipv4_first</Option>
-          <Option name="limit_suffix"/>
+          <Option name="limit_suffix"></Option>
           <Option name="limit_value">0</Option>
           <Option name="linux24_ip_forward">1</Option>
           <Option name="load_modules">True</Option>
@@ -14890,18 +14890,18 @@
           <Option name="loopback_interface">lo0</Option>
           <Option name="macosx_ip_forward">1</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"/>
+          <Option name="mgmt_addr"></Option>
           <Option name="mgmt_ssh">False</Option>
           <Option name="modulate_state">False</Option>
           <Option name="no_ipv6_default_policy">False</Option>
-          <Option name="openbsd_ip_directed_broadcast"/>
+          <Option name="openbsd_ip_directed_broadcast"></Option>
           <Option name="openbsd_ip_forward">1</Option>
-          <Option name="openbsd_ip_redirect"/>
-          <Option name="openbsd_ip_sourceroute"/>
+          <Option name="openbsd_ip_redirect"></Option>
+          <Option name="openbsd_ip_sourceroute"></Option>
           <Option name="openbsd_ipv6_forward">1</Option>
-          <Option name="openbsd_path_pfctl"/>
-          <Option name="openbsd_path_sysctl"/>
-          <Option name="output_file"/>
+          <Option name="openbsd_path_pfctl"></Option>
+          <Option name="openbsd_path_sysctl"></Option>
+          <Option name="output_file"></Option>
           <Option name="pass_all_out">False</Option>
           <Option name="pf_adaptive_end">0</Option>
           <Option name="pf_adaptive_start">0</Option>
@@ -14921,7 +14921,7 @@
           <Option name="pf_limit_states">10000</Option>
           <Option name="pf_limit_table_entries">0</Option>
           <Option name="pf_limit_tables">0</Option>
-          <Option name="pf_optimization"/>
+          <Option name="pf_optimization"></Option>
           <Option name="pf_other_first">0</Option>
           <Option name="pf_other_multiple">0</Option>
           <Option name="pf_other_single">0</Option>
@@ -14973,13 +14973,13 @@
           <Option name="pix_syslog_device_id_supported">false</Option>
           <Option name="pix_use_acl_remarks">true</Option>
           <Option name="prolog_place">fw_file</Option>
-          <Option name="prolog_script"/>
+          <Option name="prolog_script"></Option>
           <Option name="prompt1">$ </Option>
           <Option name="prompt2"> # </Option>
-          <Option name="scpArgs"/>
+          <Option name="scpArgs"></Option>
           <Option name="script_name_on_firewall">pf-ipv6.fw</Option>
           <Option name="solaris_ip_forward">1</Option>
-          <Option name="sshArgs"/>
+          <Option name="sshArgs"></Option>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -15014,7 +15014,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -15036,7 +15036,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -15060,7 +15060,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -15082,7 +15082,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -15107,7 +15107,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -15129,7 +15129,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -15154,7 +15154,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -15175,7 +15175,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -15208,8 +15208,8 @@
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">True</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
-          <Option name="cmdline"/>
-          <Option name="compiler"/>
+          <Option name="cmdline"></Option>
+          <Option name="compiler"></Option>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="dyn_addr">False</Option>
@@ -15217,28 +15217,28 @@
           <Option name="ignore_empty_groups">False</Option>
           <Option name="limit_suffix">/day</Option>
           <Option name="limit_value">0</Option>
-          <Option name="linux24_accept_redirects"/>
-          <Option name="linux24_accept_source_route"/>
-          <Option name="linux24_icmp_echo_ignore_all"/>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
-          <Option name="linux24_icmp_ignore_bogus_error_responses"/>
-          <Option name="linux24_ip_dynaddr"/>
-          <Option name="linux24_ip_forward"/>
-          <Option name="linux24_log_martians"/>
-          <Option name="linux24_path_ip"/>
-          <Option name="linux24_path_iptables"/>
-          <Option name="linux24_path_logger"/>
-          <Option name="linux24_path_lsmod"/>
-          <Option name="linux24_path_modprobe"/>
-          <Option name="linux24_rp_filter"/>
-          <Option name="linux24_tcp_ecn"/>
-          <Option name="linux24_tcp_fack"/>
+          <Option name="linux24_accept_redirects"></Option>
+          <Option name="linux24_accept_source_route"></Option>
+          <Option name="linux24_icmp_echo_ignore_all"></Option>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
+          <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
+          <Option name="linux24_ip_dynaddr"></Option>
+          <Option name="linux24_ip_forward"></Option>
+          <Option name="linux24_log_martians"></Option>
+          <Option name="linux24_path_ip"></Option>
+          <Option name="linux24_path_iptables"></Option>
+          <Option name="linux24_path_logger"></Option>
+          <Option name="linux24_path_lsmod"></Option>
+          <Option name="linux24_path_modprobe"></Option>
+          <Option name="linux24_rp_filter"></Option>
+          <Option name="linux24_tcp_ecn"></Option>
+          <Option name="linux24_tcp_fack"></Option>
           <Option name="linux24_tcp_fin_timeout">30</Option>
           <Option name="linux24_tcp_keepalive_interval">1800</Option>
-          <Option name="linux24_tcp_sack"/>
-          <Option name="linux24_tcp_syncookies"/>
-          <Option name="linux24_tcp_timestamps"/>
-          <Option name="linux24_tcp_window_scaling"/>
+          <Option name="linux24_tcp_sack"></Option>
+          <Option name="linux24_tcp_syncookies"></Option>
+          <Option name="linux24_tcp_timestamps"></Option>
+          <Option name="linux24_tcp_window_scaling"></Option>
           <Option name="load_modules">True</Option>
           <Option name="local_nat">False</Option>
           <Option name="log_all">False</Option>
@@ -15250,10 +15250,10 @@
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">True</Option>
           <Option name="no_optimisation">False</Option>
-          <Option name="script_env_path"/>
-          <Option name="snmp_contact"/>
-          <Option name="snmp_description"/>
-          <Option name="snmp_location"/>
+          <Option name="script_env_path"></Option>
+          <Option name="snmp_contact"></Option>
+          <Option name="snmp_description"></Option>
+          <Option name="snmp_location"></Option>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -15284,32 +15284,32 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
+              <Option name="action_on_reject"></Option>
               <Option name="branch_id">id48493B6E4626</Option>
               <Option name="branch_name">rule0_branch</Option>
-              <Option name="classify_str"/>
+              <Option name="classify_str"></Option>
               <Option name="color">#8BC065</Option>
-              <Option name="custom_str"/>
-              <Option name="ipf_route_opt_addr"/>
-              <Option name="ipf_route_opt_if"/>
+              <Option name="custom_str"></Option>
+              <Option name="ipf_route_opt_addr"></Option>
+              <Option name="ipf_route_opt_if"></Option>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_branch_in_mangle">False</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"/>
-              <Option name="ipt_iif"/>
+              <Option name="ipt_gw"></Option>
+              <Option name="ipt_iif"></Option>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"/>
+              <Option name="ipt_oif"></Option>
               <Option name="ipt_tee">False</Option>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"/>
-              <Option name="pf_route_opt_if"/>
+              <Option name="pf_route_opt_addr"></Option>
+              <Option name="pf_route_opt_if"></Option>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"/>
+              <Option name="rule_name_accounting"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -15330,32 +15330,32 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
+              <Option name="action_on_reject"></Option>
               <Option name="branch_id">id484B0A134626</Option>
               <Option name="branch_name">rule0_branch</Option>
-              <Option name="classify_str"/>
+              <Option name="classify_str"></Option>
               <Option name="color">#8BC065</Option>
-              <Option name="custom_str"/>
-              <Option name="ipf_route_opt_addr"/>
-              <Option name="ipf_route_opt_if"/>
+              <Option name="custom_str"></Option>
+              <Option name="ipf_route_opt_addr"></Option>
+              <Option name="ipf_route_opt_if"></Option>
               <Option name="ipf_route_option">route_reply_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_branch_in_mangle">False</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"/>
-              <Option name="ipt_iif"/>
+              <Option name="ipt_gw"></Option>
+              <Option name="ipt_iif"></Option>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"/>
+              <Option name="ipt_oif"></Option>
               <Option name="ipt_tee">False</Option>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"/>
-              <Option name="pf_route_opt_if"/>
+              <Option name="pf_route_opt_addr"></Option>
+              <Option name="pf_route_opt_if"></Option>
               <Option name="pf_route_option">route_reply_through</Option>
-              <Option name="rule_name_accounting"/>
+              <Option name="rule_name_accounting"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -15376,32 +15376,32 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
+              <Option name="action_on_reject"></Option>
               <Option name="branch_id">id4848A4414626</Option>
               <Option name="branch_name">rule1_branch</Option>
-              <Option name="classify_str"/>
+              <Option name="classify_str"></Option>
               <Option name="color">#8BC065</Option>
-              <Option name="custom_str"/>
-              <Option name="ipf_route_opt_addr"/>
-              <Option name="ipf_route_opt_if"/>
+              <Option name="custom_str"></Option>
+              <Option name="ipf_route_opt_addr"></Option>
+              <Option name="ipf_route_opt_if"></Option>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_branch_in_mangle">False</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"/>
-              <Option name="ipt_iif"/>
+              <Option name="ipt_gw"></Option>
+              <Option name="ipt_iif"></Option>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"/>
+              <Option name="ipt_oif"></Option>
               <Option name="ipt_tee">False</Option>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"/>
-              <Option name="pf_route_opt_if"/>
+              <Option name="pf_route_opt_addr"></Option>
+              <Option name="pf_route_opt_if"></Option>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"/>
+              <Option name="rule_name_accounting"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -15422,32 +15422,32 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
+              <Option name="action_on_reject"></Option>
               <Option name="branch_id">id484B3D324626</Option>
               <Option name="branch_name">rule1_branch</Option>
-              <Option name="classify_str"/>
+              <Option name="classify_str"></Option>
               <Option name="color">#8BC065</Option>
-              <Option name="custom_str"/>
-              <Option name="ipf_route_opt_addr"/>
-              <Option name="ipf_route_opt_if"/>
+              <Option name="custom_str"></Option>
+              <Option name="ipf_route_opt_addr"></Option>
+              <Option name="ipf_route_opt_if"></Option>
               <Option name="ipf_route_option">route_reply_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_branch_in_mangle">False</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"/>
-              <Option name="ipt_iif"/>
+              <Option name="ipt_gw"></Option>
+              <Option name="ipt_iif"></Option>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"/>
+              <Option name="ipt_oif"></Option>
               <Option name="ipt_tee">False</Option>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"/>
-              <Option name="pf_route_opt_if"/>
+              <Option name="pf_route_opt_addr"></Option>
+              <Option name="pf_route_opt_if"></Option>
               <Option name="pf_route_option">route_reply_through</Option>
-              <Option name="rule_name_accounting"/>
+              <Option name="rule_name_accounting"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -15470,7 +15470,7 @@
             <PolicyRuleOptions>
               <Option name="branch_name">rule2_branch</Option>
               <Option name="color">#7694C0</Option>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -15495,7 +15495,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -15526,51 +15526,51 @@
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
           <Option name="action_on_reject">ICMP net unreachable</Option>
-          <Option name="activationCmd"/>
-          <Option name="admUser"/>
-          <Option name="altAddress"/>
+          <Option name="activationCmd"></Option>
+          <Option name="admUser"></Option>
+          <Option name="altAddress"></Option>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">False</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
           <Option name="classify_mark_terminating">False</Option>
-          <Option name="cmdline"/>
-          <Option name="compiler"/>
+          <Option name="cmdline"></Option>
+          <Option name="compiler"></Option>
           <Option name="configure_interfaces">False</Option>
           <Option name="debug">False</Option>
           <Option name="drop_invalid">False</Option>
           <Option name="dyn_addr">False</Option>
-          <Option name="epilog_script"/>
-          <Option name="firewall_dir"/>
+          <Option name="epilog_script"></Option>
+          <Option name="firewall_dir"></Option>
           <Option name="firewall_is_part_of_any">True</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="ignore_empty_groups">False</Option>
-          <Option name="inst_cmdline"/>
-          <Option name="inst_script"/>
-          <Option name="install_script"/>
+          <Option name="inst_cmdline"></Option>
+          <Option name="inst_script"></Option>
+          <Option name="install_script"></Option>
           <Option name="limit_suffix">/day</Option>
           <Option name="limit_value">0</Option>
-          <Option name="linux24_accept_redirects"/>
-          <Option name="linux24_accept_source_route"/>
-          <Option name="linux24_icmp_echo_ignore_all"/>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
-          <Option name="linux24_icmp_ignore_bogus_error_responses"/>
-          <Option name="linux24_ip_dynaddr"/>
-          <Option name="linux24_ip_forward"/>
-          <Option name="linux24_log_martians"/>
-          <Option name="linux24_path_ip"/>
-          <Option name="linux24_path_iptables"/>
-          <Option name="linux24_path_logger"/>
-          <Option name="linux24_path_lsmod"/>
-          <Option name="linux24_path_modprobe"/>
-          <Option name="linux24_rp_filter"/>
-          <Option name="linux24_tcp_ecn"/>
-          <Option name="linux24_tcp_fack"/>
+          <Option name="linux24_accept_redirects"></Option>
+          <Option name="linux24_accept_source_route"></Option>
+          <Option name="linux24_icmp_echo_ignore_all"></Option>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
+          <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
+          <Option name="linux24_ip_dynaddr"></Option>
+          <Option name="linux24_ip_forward"></Option>
+          <Option name="linux24_log_martians"></Option>
+          <Option name="linux24_path_ip"></Option>
+          <Option name="linux24_path_iptables"></Option>
+          <Option name="linux24_path_logger"></Option>
+          <Option name="linux24_path_lsmod"></Option>
+          <Option name="linux24_path_modprobe"></Option>
+          <Option name="linux24_rp_filter"></Option>
+          <Option name="linux24_tcp_ecn"></Option>
+          <Option name="linux24_tcp_fack"></Option>
           <Option name="linux24_tcp_fin_timeout">30</Option>
           <Option name="linux24_tcp_keepalive_interval">1800</Option>
-          <Option name="linux24_tcp_sack"/>
-          <Option name="linux24_tcp_syncookies"/>
-          <Option name="linux24_tcp_timestamps"/>
-          <Option name="linux24_tcp_window_scaling"/>
+          <Option name="linux24_tcp_sack"></Option>
+          <Option name="linux24_tcp_syncookies"></Option>
+          <Option name="linux24_tcp_timestamps"></Option>
+          <Option name="linux24_tcp_window_scaling"></Option>
           <Option name="load_modules">False</Option>
           <Option name="local_nat">False</Option>
           <Option name="log_all">False</Option>
@@ -15580,25 +15580,25 @@
           <Option name="log_level">debug</Option>
           <Option name="log_limit_suffix">/second</Option>
           <Option name="log_limit_value">0</Option>
-          <Option name="log_prefix"/>
+          <Option name="log_prefix"></Option>
           <Option name="log_tcp_opt">False</Option>
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">False</Option>
-          <Option name="mgmt_addr"/>
+          <Option name="mgmt_addr"></Option>
           <Option name="mgmt_ssh">False</Option>
           <Option name="no_iochains_for_any">False</Option>
           <Option name="no_ipv6_default_policy">False</Option>
           <Option name="no_optimisation">False</Option>
-          <Option name="output_file"/>
+          <Option name="output_file"></Option>
           <Option name="platform">iptables</Option>
           <Option name="prolog_place">top</Option>
-          <Option name="prolog_script"/>
+          <Option name="prolog_script"></Option>
           <Option name="proxy_arp">False</Option>
-          <Option name="script_env_path"/>
-          <Option name="snmp_contact"/>
-          <Option name="snmp_description"/>
-          <Option name="snmp_location"/>
-          <Option name="sshArgs"/>
+          <Option name="script_env_path"></Option>
+          <Option name="snmp_contact"></Option>
+          <Option name="snmp_description"></Option>
+          <Option name="snmp_location"></Option>
+          <Option name="sshArgs"></Option>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -15631,7 +15631,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -15653,7 +15653,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -15674,7 +15674,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -15696,7 +15696,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -15718,7 +15718,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -15740,7 +15740,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -15761,7 +15761,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -15782,7 +15782,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -15803,7 +15803,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -15825,7 +15825,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -15846,7 +15846,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -15867,7 +15867,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -15888,7 +15888,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -15909,7 +15909,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -15934,18 +15934,18 @@
         <FirewallOptions>
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
-          <Option name="action_on_reject"/>
-          <Option name="activationCmd"/>
+          <Option name="action_on_reject"></Option>
+          <Option name="activationCmd"></Option>
           <Option name="add_check_state_rule">true</Option>
-          <Option name="admUser"/>
-          <Option name="altAddress"/>
+          <Option name="admUser"></Option>
+          <Option name="altAddress"></Option>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">True</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
           <Option name="classify_mark_terminating">False</Option>
           <Option name="cmdline">-xt</Option>
-          <Option name="compiler"/>
-          <Option name="conf_file_name_on_firewall"/>
+          <Option name="compiler"></Option>
+          <Option name="conf_file_name_on_firewall"></Option>
           <Option name="configure_carp_interfaces">False</Option>
           <Option name="configure_interfaces">True</Option>
           <Option name="configure_pfsync_interfaces">False</Option>
@@ -15954,7 +15954,7 @@
           <Option name="drop_invalid">False</Option>
           <Option name="eliminate_duplicates">true</Option>
           <Option name="enable_ipv6">False</Option>
-          <Option name="epilog_script"/>
+          <Option name="epilog_script"></Option>
           <Option name="fallback_log">False</Option>
           <Option name="firewall_dir">/etc</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
@@ -15965,7 +15965,7 @@
           <Option name="iosacl_assume_fw_part_of_any">true</Option>
           <Option name="iosacl_include_comments">true</Option>
           <Option name="ipv4_6_order">ipv4_first</Option>
-          <Option name="limit_suffix"/>
+          <Option name="limit_suffix"></Option>
           <Option name="limit_value">0</Option>
           <Option name="linux24_ip_forward">1</Option>
           <Option name="load_modules">True</Option>
@@ -15980,11 +15980,11 @@
           <Option name="loopback_interface">lo0</Option>
           <Option name="macosx_ip_forward">1</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"/>
+          <Option name="mgmt_addr"></Option>
           <Option name="mgmt_ssh">False</Option>
           <Option name="no_ipv6_default_policy">False</Option>
           <Option name="openbsd_ip_forward">1</Option>
-          <Option name="output_file"/>
+          <Option name="output_file"></Option>
           <Option name="pass_all_out">false</Option>
           <Option name="pf_adaptive_end">0</Option>
           <Option name="pf_adaptive_start">0</Option>
@@ -16005,7 +16005,7 @@
           <Option name="pf_limit_table_entries">0</Option>
           <Option name="pf_limit_tables">0</Option>
           <Option name="pf_modulate_state">False</Option>
-          <Option name="pf_optimization"/>
+          <Option name="pf_optimization"></Option>
           <Option name="pf_other_first">0</Option>
           <Option name="pf_other_multiple">0</Option>
           <Option name="pf_other_single">0</Option>
@@ -16057,13 +16057,13 @@
           <Option name="pix_syslog_device_id_supported">false</Option>
           <Option name="pix_use_acl_remarks">true</Option>
           <Option name="prolog_place">fw_file</Option>
-          <Option name="prolog_script"/>
+          <Option name="prolog_script"></Option>
           <Option name="prompt1">$ </Option>
           <Option name="prompt2"> # </Option>
-          <Option name="scpArgs"/>
-          <Option name="script_name_on_firewall"/>
+          <Option name="scpArgs"></Option>
+          <Option name="script_name_on_firewall"></Option>
           <Option name="solaris_ip_forward">1</Option>
-          <Option name="sshArgs"/>
+          <Option name="sshArgs"></Option>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -16122,11 +16122,11 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
+              <Option name="action_on_reject"></Option>
               <Option name="limit_value">0</Option>
-              <Option name="log_limit_suffix"/>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_limit_suffix"></Option>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -16147,11 +16147,11 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
+              <Option name="action_on_reject"></Option>
               <Option name="limit_value">0</Option>
-              <Option name="log_limit_suffix"/>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_limit_suffix"></Option>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -16173,7 +16173,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -16194,11 +16194,11 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
+              <Option name="action_on_reject"></Option>
               <Option name="limit_value">0</Option>
-              <Option name="log_limit_suffix"/>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_limit_suffix"></Option>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -16219,7 +16219,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -16249,27 +16249,27 @@
           <Option name="accept_established">False</Option>
           <Option name="accept_new_tcp_with_no_syn">False</Option>
           <Option name="action_on_reject">ICMP net unreachable</Option>
-          <Option name="activationCmd"/>
-          <Option name="admUser"/>
-          <Option name="altAddress"/>
+          <Option name="activationCmd"></Option>
+          <Option name="admUser"></Option>
+          <Option name="altAddress"></Option>
           <Option name="check_shading">False</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
-          <Option name="cmdline"/>
-          <Option name="compiler"/>
+          <Option name="cmdline"></Option>
+          <Option name="compiler"></Option>
           <Option name="configure_interfaces">False</Option>
           <Option name="debug">False</Option>
           <Option name="dyn_addr">False</Option>
           <Option name="enable_ipv6">False</Option>
-          <Option name="epilog_script"/>
+          <Option name="epilog_script"></Option>
           <Option name="fallback_log">False</Option>
-          <Option name="firewall_dir"/>
+          <Option name="firewall_dir"></Option>
           <Option name="firewall_is_part_of_any">True</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="ignore_empty_groups">True</Option>
           <Option name="in_out_code">True</Option>
-          <Option name="inst_cmdline"/>
-          <Option name="inst_script"/>
-          <Option name="install_script"/>
+          <Option name="inst_cmdline"></Option>
+          <Option name="inst_script"></Option>
+          <Option name="install_script"></Option>
           <Option name="ipv4_6_order">ipv4_first</Option>
           <Option name="limit_suffix">/second</Option>
           <Option name="limit_value">0</Option>
@@ -16282,11 +16282,11 @@
           <Option name="log_level">debug</Option>
           <Option name="log_limit_suffix">/second</Option>
           <Option name="log_limit_value">0</Option>
-          <Option name="log_prefix"/>
+          <Option name="log_prefix"></Option>
           <Option name="log_tcp_opt">False</Option>
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"/>
+          <Option name="mgmt_addr"></Option>
           <Option name="mgmt_ssh">False</Option>
           <Option name="modulate_state">True</Option>
           <Option name="no_iochains_for_any">False</Option>
@@ -16295,9 +16295,9 @@
           <Option name="openbsd_ip_forward">1</Option>
           <Option name="openbsd_ip_redirect">0</Option>
           <Option name="openbsd_ip_sourceroute">0</Option>
-          <Option name="openbsd_path_pfctl"/>
-          <Option name="openbsd_path_sysctl"/>
-          <Option name="output_file"/>
+          <Option name="openbsd_path_pfctl"></Option>
+          <Option name="openbsd_path_sysctl"></Option>
+          <Option name="output_file"></Option>
           <Option name="pass_all_out">False</Option>
           <Option name="pf_adaptive_end">0</Option>
           <Option name="pf_adaptive_start">0</Option>
@@ -16316,7 +16316,7 @@
           <Option name="pf_limit_states">10000</Option>
           <Option name="pf_limit_table_entries">0</Option>
           <Option name="pf_limit_tables">0</Option>
-          <Option name="pf_optimization"/>
+          <Option name="pf_optimization"></Option>
           <Option name="pf_other_first">0</Option>
           <Option name="pf_other_multiple">0</Option>
           <Option name="pf_other_single">0</Option>
@@ -16357,12 +16357,12 @@
           <Option name="pf_udp_single">0</Option>
           <Option name="platform">iptables</Option>
           <Option name="prolog_place">fw_file</Option>
-          <Option name="prolog_script"/>
-          <Option name="script_env_path"/>
-          <Option name="snmp_contact"/>
-          <Option name="snmp_description"/>
-          <Option name="snmp_location"/>
-          <Option name="sshArgs"/>
+          <Option name="prolog_script"></Option>
+          <Option name="script_env_path"></Option>
+          <Option name="snmp_contact"></Option>
+          <Option name="snmp_description"></Option>
+          <Option name="snmp_location"></Option>
+          <Option name="sshArgs"></Option>
           <Option name="use_numeric_log_levels">False</Option>
           <Option name="use_tables">True</Option>
         </FirewallOptions>
@@ -16494,7 +16494,7 @@
               <ObjectRef ref="id14574X3490"/>
             </Itf>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -16515,7 +16515,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -16536,7 +16536,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -16573,19 +16573,19 @@
           <Option name="action_on_reject">ICMP net unreachable</Option>
           <Option name="check_shading">True</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
-          <Option name="cmdline"/>
-          <Option name="compiler"/>
+          <Option name="cmdline"></Option>
+          <Option name="compiler"></Option>
           <Option name="configure_interfaces">False</Option>
           <Option name="debug">False</Option>
           <Option name="dyn_addr">False</Option>
-          <Option name="firewall_dir"/>
+          <Option name="firewall_dir"></Option>
           <Option name="firewall_is_part_of_any">True</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="ignore_empty_groups">False</Option>
           <Option name="in_out_code">True</Option>
-          <Option name="inst_cmdline"/>
-          <Option name="inst_script"/>
-          <Option name="install_script"/>
+          <Option name="inst_cmdline"></Option>
+          <Option name="inst_script"></Option>
+          <Option name="install_script"></Option>
           <Option name="limit_suffix">/day</Option>
           <Option name="limit_value">0</Option>
           <Option name="linux24_ip_forward">0</Option>
@@ -16597,20 +16597,20 @@
           <Option name="log_level">debug</Option>
           <Option name="log_limit_suffix">/second</Option>
           <Option name="log_limit_value">0</Option>
-          <Option name="log_prefix"/>
+          <Option name="log_prefix"></Option>
           <Option name="log_tcp_opt">False</Option>
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">True</Option>
           <Option name="modulate_state">False</Option>
           <Option name="no_iochains_for_any">False</Option>
           <Option name="no_optimisation">False</Option>
-          <Option name="openbsd_path_pfctl"/>
-          <Option name="openbsd_path_sysctl"/>
+          <Option name="openbsd_path_pfctl"></Option>
+          <Option name="openbsd_path_sysctl"></Option>
           <Option name="pass_all_out">False</Option>
           <Option name="pf_do_scrub">True</Option>
           <Option name="pf_limit_frags">5000</Option>
           <Option name="pf_limit_states">10000</Option>
-          <Option name="pf_optimization"/>
+          <Option name="pf_optimization"></Option>
           <Option name="pf_scrub_fragm_crop">False</Option>
           <Option name="pf_scrub_fragm_drop_ovl">False</Option>
           <Option name="pf_scrub_maxmss">1460</Option>
@@ -16623,10 +16623,10 @@
           <Option name="pf_timeout_interval">10</Option>
           <Option name="platform">iptables</Option>
           <Option name="proxy_arp">False</Option>
-          <Option name="script_env_path"/>
-          <Option name="snmp_contact"/>
-          <Option name="snmp_description"/>
-          <Option name="snmp_location"/>
+          <Option name="script_env_path"></Option>
+          <Option name="snmp_contact"></Option>
+          <Option name="snmp_description"></Option>
+          <Option name="snmp_location"></Option>
           <Option name="use_ip_tool">False</Option>
           <Option name="use_numeric_log_levels">False</Option>
           <Option name="use_tables">True</Option>
@@ -16654,7 +16654,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -16675,7 +16675,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -16696,7 +16696,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -16717,7 +16717,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -16740,7 +16740,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -16762,7 +16762,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -16783,7 +16783,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -16804,7 +16804,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -16825,7 +16825,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -16846,7 +16846,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -16867,7 +16867,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -16888,7 +16888,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -16910,7 +16910,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -16937,17 +16937,17 @@
         <FirewallOptions>
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
-          <Option name="action_on_reject"/>
-          <Option name="activationCmd"/>
+          <Option name="action_on_reject"></Option>
+          <Option name="activationCmd"></Option>
           <Option name="add_check_state_rule">true</Option>
-          <Option name="admUser"/>
-          <Option name="altAddress"/>
+          <Option name="admUser"></Option>
+          <Option name="altAddress"></Option>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">True</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
           <Option name="classify_mark_terminating">False</Option>
           <Option name="cmdline">-xt</Option>
-          <Option name="compiler"/>
+          <Option name="compiler"></Option>
           <Option name="conf_file_name_on_firewall">pf.conf</Option>
           <Option name="configure_carp_interfaces">False</Option>
           <Option name="configure_interfaces">True</Option>
@@ -16957,27 +16957,27 @@
           <Option name="drop_invalid">False</Option>
           <Option name="eliminate_duplicates">true</Option>
           <Option name="enable_ipv6">True</Option>
-          <Option name="epilog_script"/>
+          <Option name="epilog_script"></Option>
           <Option name="fallback_log">False</Option>
           <Option name="firewall_dir">/etc</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="freebsd_ip_forward">1</Option>
-          <Option name="freebsd_ip_redirect"/>
-          <Option name="freebsd_ip_sourceroute"/>
+          <Option name="freebsd_ip_redirect"></Option>
+          <Option name="freebsd_ip_sourceroute"></Option>
           <Option name="freebsd_ipv6_forward">1</Option>
-          <Option name="freebsd_path_ipf"/>
-          <Option name="freebsd_path_ipfw"/>
-          <Option name="freebsd_path_ipnat"/>
-          <Option name="freebsd_path_sysctl"/>
+          <Option name="freebsd_path_ipf"></Option>
+          <Option name="freebsd_path_ipfw"></Option>
+          <Option name="freebsd_path_ipnat"></Option>
+          <Option name="freebsd_path_sysctl"></Option>
           <Option name="generate_shell_script">True</Option>
           <Option name="ignore_empty_groups">False</Option>
           <Option name="in_out_code">True</Option>
           <Option name="iosacl_add_clear_statements">true</Option>
           <Option name="iosacl_assume_fw_part_of_any">true</Option>
           <Option name="iosacl_include_comments">true</Option>
-          <Option name="ipt_mangle_only_rulesets"/>
+          <Option name="ipt_mangle_only_rulesets"></Option>
           <Option name="ipv4_6_order">ipv4_first</Option>
-          <Option name="limit_suffix"/>
+          <Option name="limit_suffix"></Option>
           <Option name="limit_value">0</Option>
           <Option name="linux24_ip_forward">1</Option>
           <Option name="load_modules">True</Option>
@@ -16992,18 +16992,18 @@
           <Option name="loopback_interface">lo0</Option>
           <Option name="macosx_ip_forward">1</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"/>
+          <Option name="mgmt_addr"></Option>
           <Option name="mgmt_ssh">False</Option>
           <Option name="modulate_state">False</Option>
           <Option name="no_ipv6_default_policy">False</Option>
-          <Option name="openbsd_ip_directed_broadcast"/>
+          <Option name="openbsd_ip_directed_broadcast"></Option>
           <Option name="openbsd_ip_forward">1</Option>
-          <Option name="openbsd_ip_redirect"/>
-          <Option name="openbsd_ip_sourceroute"/>
+          <Option name="openbsd_ip_redirect"></Option>
+          <Option name="openbsd_ip_sourceroute"></Option>
           <Option name="openbsd_ipv6_forward">1</Option>
-          <Option name="openbsd_path_pfctl"/>
-          <Option name="openbsd_path_sysctl"/>
-          <Option name="output_file"/>
+          <Option name="openbsd_path_pfctl"></Option>
+          <Option name="openbsd_path_sysctl"></Option>
+          <Option name="output_file"></Option>
           <Option name="pass_all_out">False</Option>
           <Option name="pf_adaptive_end">0</Option>
           <Option name="pf_adaptive_start">0</Option>
@@ -17023,7 +17023,7 @@
           <Option name="pf_limit_states">10000</Option>
           <Option name="pf_limit_table_entries">0</Option>
           <Option name="pf_limit_tables">0</Option>
-          <Option name="pf_optimization"/>
+          <Option name="pf_optimization"></Option>
           <Option name="pf_other_first">0</Option>
           <Option name="pf_other_multiple">0</Option>
           <Option name="pf_other_single">0</Option>
@@ -17075,13 +17075,13 @@
           <Option name="pix_syslog_device_id_supported">false</Option>
           <Option name="pix_use_acl_remarks">true</Option>
           <Option name="prolog_place">fw_file</Option>
-          <Option name="prolog_script"/>
+          <Option name="prolog_script"></Option>
           <Option name="prompt1">$ </Option>
           <Option name="prompt2"> # </Option>
-          <Option name="scpArgs"/>
+          <Option name="scpArgs"></Option>
           <Option name="script_name_on_firewall">pf.fw</Option>
           <Option name="solaris_ip_forward">1</Option>
-          <Option name="sshArgs"/>
+          <Option name="sshArgs"></Option>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -17113,7 +17113,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -17134,7 +17134,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -17155,7 +17155,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -17176,7 +17176,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -17207,14 +17207,14 @@
         </Management>
         <FirewallOptions>
           <Option name="check_shading">False</Option>
-          <Option name="cmdline"/>
-          <Option name="compiler"/>
+          <Option name="cmdline"></Option>
+          <Option name="compiler"></Option>
           <Option name="configure_interfaces">False</Option>
           <Option name="debug">False</Option>
           <Option name="firewall_dir">/etc</Option>
           <Option name="ignore_empty_groups">False</Option>
           <Option name="in_out_code">True</Option>
-          <Option name="log_prefix"/>
+          <Option name="log_prefix"></Option>
           <Option name="manage_virtual_addr">False</Option>
           <Option name="modulate_state">False</Option>
           <Option name="no_optimisation">False</Option>
@@ -17225,7 +17225,7 @@
           <Option name="pf_do_scrub">True</Option>
           <Option name="pf_limit_frags">5000</Option>
           <Option name="pf_limit_states">10000</Option>
-          <Option name="pf_optimization"/>
+          <Option name="pf_optimization"></Option>
           <Option name="pf_scrub_fragm_crop">False</Option>
           <Option name="pf_scrub_fragm_drop_ovl">False</Option>
           <Option name="pf_scrub_maxmss">1460</Option>
@@ -17236,9 +17236,9 @@
           <Option name="pf_scrub_use_minttl">False</Option>
           <Option name="pf_timeout_frag">30</Option>
           <Option name="pf_timeout_interval">10</Option>
-          <Option name="snmp_contact"/>
-          <Option name="snmp_description"/>
-          <Option name="snmp_location"/>
+          <Option name="snmp_contact"></Option>
+          <Option name="snmp_description"></Option>
+          <Option name="snmp_location"></Option>
           <Option name="use_tables">True</Option>
         </FirewallOptions>
       </Firewall>
@@ -17696,7 +17696,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id79005X23273" disabled="False" group="" log="True" position="1" action="Deny" direction="Both" comment="">
@@ -17716,7 +17716,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -17749,36 +17749,36 @@
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">False</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
-          <Option name="cmdline"/>
-          <Option name="compiler"/>
+          <Option name="cmdline"></Option>
+          <Option name="compiler"></Option>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="ignore_empty_groups">False</Option>
-          <Option name="limit_suffix"/>
+          <Option name="limit_suffix"></Option>
           <Option name="limit_value">0</Option>
-          <Option name="linux24_accept_redirects"/>
-          <Option name="linux24_accept_source_route"/>
-          <Option name="linux24_icmp_echo_ignore_all"/>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
-          <Option name="linux24_icmp_ignore_bogus_error_responses"/>
-          <Option name="linux24_ip_dynaddr"/>
-          <Option name="linux24_ip_forward"/>
-          <Option name="linux24_log_martians"/>
-          <Option name="linux24_path_ip"/>
-          <Option name="linux24_path_iptables"/>
-          <Option name="linux24_path_logger"/>
-          <Option name="linux24_path_lsmod"/>
-          <Option name="linux24_path_modprobe"/>
-          <Option name="linux24_rp_filter"/>
-          <Option name="linux24_tcp_ecn"/>
-          <Option name="linux24_tcp_fack"/>
+          <Option name="linux24_accept_redirects"></Option>
+          <Option name="linux24_accept_source_route"></Option>
+          <Option name="linux24_icmp_echo_ignore_all"></Option>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
+          <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
+          <Option name="linux24_ip_dynaddr"></Option>
+          <Option name="linux24_ip_forward"></Option>
+          <Option name="linux24_log_martians"></Option>
+          <Option name="linux24_path_ip"></Option>
+          <Option name="linux24_path_iptables"></Option>
+          <Option name="linux24_path_logger"></Option>
+          <Option name="linux24_path_lsmod"></Option>
+          <Option name="linux24_path_modprobe"></Option>
+          <Option name="linux24_rp_filter"></Option>
+          <Option name="linux24_tcp_ecn"></Option>
+          <Option name="linux24_tcp_fack"></Option>
           <Option name="linux24_tcp_fin_timeout">30</Option>
           <Option name="linux24_tcp_keepalive_interval">1800</Option>
-          <Option name="linux24_tcp_sack"/>
-          <Option name="linux24_tcp_syncookies"/>
-          <Option name="linux24_tcp_timestamps"/>
-          <Option name="linux24_tcp_window_scaling"/>
+          <Option name="linux24_tcp_sack"></Option>
+          <Option name="linux24_tcp_syncookies"></Option>
+          <Option name="linux24_tcp_timestamps"></Option>
+          <Option name="linux24_tcp_window_scaling"></Option>
           <Option name="load_modules">True</Option>
           <Option name="local_nat">False</Option>
           <Option name="log_all">False</Option>
@@ -17790,9 +17790,9 @@
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">True</Option>
           <Option name="no_optimisation">False</Option>
-          <Option name="snmp_contact"/>
-          <Option name="snmp_description"/>
-          <Option name="snmp_location"/>
+          <Option name="snmp_contact"></Option>
+          <Option name="snmp_description"></Option>
+          <Option name="snmp_location"></Option>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -17823,7 +17823,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -17844,7 +17844,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -17865,7 +17865,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -17886,7 +17886,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -17908,7 +17908,7 @@
             </When>
             <PolicyRuleOptions>
               <Option name="color">#8BC065</Option>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -17930,7 +17930,7 @@
             </When>
             <PolicyRuleOptions>
               <Option name="color">#C08B5A</Option>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -17951,8 +17951,8 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="color"/>
-              <Option name="pf_classify_str"/>
+              <Option name="color"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -17973,8 +17973,8 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="color"/>
-              <Option name="pf_classify_str"/>
+              <Option name="color"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -17995,8 +17995,8 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="color"/>
-              <Option name="pf_classify_str"/>
+              <Option name="color"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -18017,8 +18017,8 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="color"/>
-              <Option name="pf_classify_str"/>
+              <Option name="color"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -18039,8 +18039,8 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="color"/>
-              <Option name="pf_classify_str"/>
+              <Option name="color"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -18061,8 +18061,8 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="color"/>
-              <Option name="pf_classify_str"/>
+              <Option name="color"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -18083,8 +18083,8 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="color"/>
-              <Option name="pf_classify_str"/>
+              <Option name="color"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -18108,7 +18108,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -18132,7 +18132,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -18170,8 +18170,8 @@
           <Option name="accept_established">true</Option>
           <Option name="accept_new_tcp_with_no_syn">true</Option>
           <Option name="add_check_state_rule">true</Option>
-          <Option name="admUser"/>
-          <Option name="altAddress"/>
+          <Option name="admUser"></Option>
+          <Option name="altAddress"></Option>
           <Option name="check_shading">True</Option>
           <Option name="configure_interfaces">true</Option>
           <Option name="eliminate_duplicates">true</Option>
@@ -18184,10 +18184,10 @@
           <Option name="iosacl_acl_basic">True</Option>
           <Option name="iosacl_acl_no_clear">False</Option>
           <Option name="iosacl_acl_substitution">False</Option>
-          <Option name="iosacl_acl_temp_addr"/>
+          <Option name="iosacl_acl_temp_addr"></Option>
           <Option name="iosacl_add_clear_statements">true</Option>
           <Option name="iosacl_assume_fw_part_of_any">true</Option>
-          <Option name="iosacl_epilog_script"/>
+          <Option name="iosacl_epilog_script"></Option>
           <Option name="iosacl_include_comments">True</Option>
           <Option name="iosacl_logging_buffered">False</Option>
           <Option name="iosacl_logging_buffered_level">0</Option>
@@ -18195,11 +18195,11 @@
           <Option name="iosacl_logging_console_level">0</Option>
           <Option name="iosacl_logging_timestamp">False</Option>
           <Option name="iosacl_logging_trap_level">0</Option>
-          <Option name="iosacl_prolog_script"/>
+          <Option name="iosacl_prolog_script"></Option>
           <Option name="iosacl_regroup_commands">False</Option>
-          <Option name="iosacl_syslog_facility"/>
-          <Option name="iosacl_syslog_host"/>
-          <Option name="ipt_mangle_only_rulesets"/>
+          <Option name="iosacl_syslog_facility"></Option>
+          <Option name="iosacl_syslog_host"></Option>
+          <Option name="ipt_mangle_only_rulesets"></Option>
           <Option name="ipv4_6_order">ipv4_first</Option>
           <Option name="limit_value">0</Option>
           <Option name="linux24_ip_forward">1</Option>
@@ -18210,10 +18210,10 @@
           <Option name="loopback_interface">lo0</Option>
           <Option name="macosx_ip_forward">1</Option>
           <Option name="manage_virtual_addr">true</Option>
-          <Option name="mgmt_addr"/>
+          <Option name="mgmt_addr"></Option>
           <Option name="mgmt_ssh">False</Option>
           <Option name="openbsd_ip_forward">1</Option>
-          <Option name="output_file"/>
+          <Option name="output_file"></Option>
           <Option name="pass_all_out">false</Option>
           <Option name="pf_limit_frags">5000</Option>
           <Option name="pf_limit_states">10000</Option>
@@ -18235,7 +18235,7 @@
           <Option name="prompt1">$ </Option>
           <Option name="prompt2"> # </Option>
           <Option name="solaris_ip_forward">1</Option>
-          <Option name="sshArgs"/>
+          <Option name="sshArgs"></Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="verify_interfaces">true</Option>
         </FirewallOptions>
@@ -18289,11 +18289,11 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
+              <Option name="action_on_reject"></Option>
               <Option name="limit_value">0</Option>
-              <Option name="log_limit_suffix"/>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_limit_suffix"></Option>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -18314,11 +18314,11 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
+              <Option name="action_on_reject"></Option>
               <Option name="limit_value">0</Option>
-              <Option name="log_limit_suffix"/>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_limit_suffix"></Option>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -18340,11 +18340,11 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
+              <Option name="action_on_reject"></Option>
               <Option name="limit_value">0</Option>
-              <Option name="log_limit_suffix"/>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_limit_suffix"></Option>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -18368,11 +18368,11 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
+              <Option name="action_on_reject"></Option>
               <Option name="limit_value">0</Option>
-              <Option name="log_limit_suffix"/>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_limit_suffix"></Option>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -18393,11 +18393,11 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
+              <Option name="action_on_reject"></Option>
               <Option name="limit_value">0</Option>
-              <Option name="log_limit_suffix"/>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_limit_suffix"></Option>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -18419,11 +18419,11 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
+              <Option name="action_on_reject"></Option>
               <Option name="limit_value">0</Option>
-              <Option name="log_limit_suffix"/>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_limit_suffix"></Option>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -18460,27 +18460,27 @@
           <Option name="accept_established">False</Option>
           <Option name="accept_new_tcp_with_no_syn">False</Option>
           <Option name="action_on_reject">ICMP net unreachable</Option>
-          <Option name="activationCmd"/>
-          <Option name="admUser"/>
-          <Option name="altAddress"/>
+          <Option name="activationCmd"></Option>
+          <Option name="admUser"></Option>
+          <Option name="altAddress"></Option>
           <Option name="check_shading">False</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
-          <Option name="cmdline"/>
-          <Option name="compiler"/>
+          <Option name="cmdline"></Option>
+          <Option name="compiler"></Option>
           <Option name="configure_interfaces">False</Option>
           <Option name="debug">False</Option>
           <Option name="dyn_addr">False</Option>
           <Option name="enable_ipv6">False</Option>
-          <Option name="epilog_script"/>
+          <Option name="epilog_script"></Option>
           <Option name="fallback_log">False</Option>
-          <Option name="firewall_dir"/>
+          <Option name="firewall_dir"></Option>
           <Option name="firewall_is_part_of_any">True</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="ignore_empty_groups">True</Option>
           <Option name="in_out_code">True</Option>
-          <Option name="inst_cmdline"/>
-          <Option name="inst_script"/>
-          <Option name="install_script"/>
+          <Option name="inst_cmdline"></Option>
+          <Option name="inst_script"></Option>
+          <Option name="install_script"></Option>
           <Option name="ipv4_6_order">ipv4_first</Option>
           <Option name="limit_suffix">/second</Option>
           <Option name="limit_value">0</Option>
@@ -18493,11 +18493,11 @@
           <Option name="log_level">debug</Option>
           <Option name="log_limit_suffix">/second</Option>
           <Option name="log_limit_value">0</Option>
-          <Option name="log_prefix"/>
+          <Option name="log_prefix"></Option>
           <Option name="log_tcp_opt">False</Option>
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"/>
+          <Option name="mgmt_addr"></Option>
           <Option name="mgmt_ssh">False</Option>
           <Option name="modulate_state">True</Option>
           <Option name="no_iochains_for_any">False</Option>
@@ -18506,9 +18506,9 @@
           <Option name="openbsd_ip_forward">1</Option>
           <Option name="openbsd_ip_redirect">0</Option>
           <Option name="openbsd_ip_sourceroute">0</Option>
-          <Option name="openbsd_path_pfctl"/>
-          <Option name="openbsd_path_sysctl"/>
-          <Option name="output_file"/>
+          <Option name="openbsd_path_pfctl"></Option>
+          <Option name="openbsd_path_sysctl"></Option>
+          <Option name="output_file"></Option>
           <Option name="pass_all_out">False</Option>
           <Option name="pf_adaptive_end">0</Option>
           <Option name="pf_adaptive_start">0</Option>
@@ -18527,7 +18527,7 @@
           <Option name="pf_limit_states">10000</Option>
           <Option name="pf_limit_table_entries">0</Option>
           <Option name="pf_limit_tables">0</Option>
-          <Option name="pf_optimization"/>
+          <Option name="pf_optimization"></Option>
           <Option name="pf_other_first">0</Option>
           <Option name="pf_other_multiple">0</Option>
           <Option name="pf_other_single">0</Option>
@@ -18568,12 +18568,12 @@
           <Option name="pf_udp_single">0</Option>
           <Option name="platform">iptables</Option>
           <Option name="prolog_place">fw_file</Option>
-          <Option name="prolog_script"/>
-          <Option name="script_env_path"/>
-          <Option name="snmp_contact"/>
-          <Option name="snmp_description"/>
-          <Option name="snmp_location"/>
-          <Option name="sshArgs"/>
+          <Option name="prolog_script"></Option>
+          <Option name="script_env_path"></Option>
+          <Option name="snmp_contact"></Option>
+          <Option name="snmp_description"></Option>
+          <Option name="snmp_location"></Option>
+          <Option name="sshArgs"></Option>
           <Option name="use_numeric_log_levels">False</Option>
           <Option name="use_tables">True</Option>
         </FirewallOptions>
@@ -18606,28 +18606,28 @@
               <ObjectRef ref="sysid0"/>
             </ItfOutb>
             <NATRuleOptions>
-              <Option name="action_on_reject"/>
+              <Option name="action_on_reject"></Option>
               <Option name="branch_id">id19696X53465</Option>
-              <Option name="classify_str"/>
-              <Option name="custom_str"/>
-              <Option name="ipf_route_opt_addr"/>
-              <Option name="ipf_route_opt_if"/>
+              <Option name="classify_str"></Option>
+              <Option name="custom_str"></Option>
+              <Option name="ipf_route_opt_addr"></Option>
+              <Option name="ipf_route_opt_if"></Option>
               <Option name="ipf_route_option">route_reply_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"/>
-              <Option name="ipt_iif"/>
+              <Option name="ipt_gw"></Option>
+              <Option name="ipt_iif"></Option>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"/>
+              <Option name="ipt_oif"></Option>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"/>
-              <Option name="pf_route_opt_if"/>
+              <Option name="pf_route_opt_addr"></Option>
+              <Option name="pf_route_opt_if"></Option>
               <Option name="pf_route_option">none</Option>
-              <Option name="rule_name_accounting"/>
+              <Option name="rule_name_accounting"></Option>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id45518X93766" disabled="False" group="" position="1" action="Translate" comment="">
@@ -18656,28 +18656,28 @@
               <ObjectRef ref="sysid0"/>
             </ItfOutb>
             <NATRuleOptions>
-              <Option name="action_on_reject"/>
+              <Option name="action_on_reject"></Option>
               <Option name="branch_id">id28067X46601</Option>
-              <Option name="classify_str"/>
-              <Option name="custom_str"/>
-              <Option name="ipf_route_opt_addr"/>
-              <Option name="ipf_route_opt_if"/>
+              <Option name="classify_str"></Option>
+              <Option name="custom_str"></Option>
+              <Option name="ipf_route_opt_addr"></Option>
+              <Option name="ipf_route_opt_if"></Option>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"/>
-              <Option name="ipt_iif"/>
+              <Option name="ipt_gw"></Option>
+              <Option name="ipt_iif"></Option>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"/>
+              <Option name="ipt_oif"></Option>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"/>
-              <Option name="pf_route_opt_if"/>
+              <Option name="pf_route_opt_addr"></Option>
+              <Option name="pf_route_opt_if"></Option>
               <Option name="pf_route_option">none</Option>
-              <Option name="rule_name_accounting"/>
+              <Option name="rule_name_accounting"></Option>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id36650X50270" disabled="False" group="" position="2" action="NATBranch" comment="">
@@ -18706,28 +18706,28 @@
               <ObjectRef ref="sysid0"/>
             </ItfOutb>
             <NATRuleOptions>
-              <Option name="action_on_reject"/>
+              <Option name="action_on_reject"></Option>
               <Option name="branch_id">id28067X46601</Option>
-              <Option name="classify_str"/>
-              <Option name="custom_str"/>
-              <Option name="ipf_route_opt_addr"/>
-              <Option name="ipf_route_opt_if"/>
+              <Option name="classify_str"></Option>
+              <Option name="custom_str"></Option>
+              <Option name="ipf_route_opt_addr"></Option>
+              <Option name="ipf_route_opt_if"></Option>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"/>
-              <Option name="ipt_iif"/>
+              <Option name="ipt_gw"></Option>
+              <Option name="ipt_iif"></Option>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"/>
+              <Option name="ipt_oif"></Option>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"/>
-              <Option name="pf_route_opt_if"/>
+              <Option name="pf_route_opt_addr"></Option>
+              <Option name="pf_route_opt_if"></Option>
               <Option name="pf_route_option">none</Option>
-              <Option name="rule_name_accounting"/>
+              <Option name="rule_name_accounting"></Option>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id45141X50270" disabled="False" group="" position="3" action="NATBranch" comment="">
@@ -18756,28 +18756,28 @@
               <ObjectRef ref="sysid0"/>
             </ItfOutb>
             <NATRuleOptions>
-              <Option name="action_on_reject"/>
+              <Option name="action_on_reject"></Option>
               <Option name="branch_id">id28067X46601</Option>
-              <Option name="classify_str"/>
-              <Option name="custom_str"/>
-              <Option name="ipf_route_opt_addr"/>
-              <Option name="ipf_route_opt_if"/>
+              <Option name="classify_str"></Option>
+              <Option name="custom_str"></Option>
+              <Option name="ipf_route_opt_addr"></Option>
+              <Option name="ipf_route_opt_if"></Option>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"/>
-              <Option name="ipt_iif"/>
+              <Option name="ipt_gw"></Option>
+              <Option name="ipt_iif"></Option>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"/>
+              <Option name="ipt_oif"></Option>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"/>
-              <Option name="pf_route_opt_if"/>
+              <Option name="pf_route_opt_addr"></Option>
+              <Option name="pf_route_opt_if"></Option>
               <Option name="pf_route_option">none</Option>
-              <Option name="rule_name_accounting"/>
+              <Option name="rule_name_accounting"></Option>
             </NATRuleOptions>
           </NATRule>
           <RuleSetOptions/>
@@ -18833,29 +18833,29 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
+              <Option name="action_on_reject"></Option>
               <Option name="branch_id">id54048X91166</Option>
-              <Option name="classify_str"/>
-              <Option name="custom_str"/>
-              <Option name="ipf_route_opt_addr"/>
-              <Option name="ipf_route_opt_if"/>
+              <Option name="classify_str"></Option>
+              <Option name="custom_str"></Option>
+              <Option name="ipf_route_opt_addr"></Option>
+              <Option name="ipf_route_opt_if"></Option>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"/>
-              <Option name="ipt_iif"/>
+              <Option name="ipt_gw"></Option>
+              <Option name="ipt_iif"></Option>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"/>
+              <Option name="ipt_oif"></Option>
               <Option name="ipt_tee">False</Option>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"/>
-              <Option name="pf_route_opt_if"/>
+              <Option name="pf_route_opt_addr"></Option>
+              <Option name="pf_route_opt_if"></Option>
               <Option name="pf_route_option">none</Option>
-              <Option name="rule_name_accounting"/>
+              <Option name="rule_name_accounting"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -18876,7 +18876,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -18911,28 +18911,28 @@
           <Option name="action_on_reject">ICMP net unreachable</Option>
           <Option name="check_shading">True</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
-          <Option name="cmdline"/>
-          <Option name="compiler"/>
+          <Option name="cmdline"></Option>
+          <Option name="compiler"></Option>
           <Option name="configure_interfaces">False</Option>
           <Option name="debug">False</Option>
           <Option name="dyn_addr">False</Option>
-          <Option name="firewall_dir"/>
+          <Option name="firewall_dir"></Option>
           <Option name="firewall_is_part_of_any">True</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
-          <Option name="freebsd_ip_forward"/>
-          <Option name="freebsd_ip_redirect"/>
-          <Option name="freebsd_ip_sourceroute"/>
-          <Option name="freebsd_ipv6_forward"/>
-          <Option name="freebsd_path_ipf"/>
-          <Option name="freebsd_path_ipnat"/>
+          <Option name="freebsd_ip_forward"></Option>
+          <Option name="freebsd_ip_redirect"></Option>
+          <Option name="freebsd_ip_sourceroute"></Option>
+          <Option name="freebsd_ipv6_forward"></Option>
+          <Option name="freebsd_path_ipf"></Option>
+          <Option name="freebsd_path_ipnat"></Option>
           <Option name="freebsd_path_pfctl">/usr/local/bin/pfctl</Option>
-          <Option name="freebsd_path_sysctl"/>
+          <Option name="freebsd_path_sysctl"></Option>
           <Option name="ignore_empty_groups">False</Option>
           <Option name="in_out_code">True</Option>
-          <Option name="inst_cmdline"/>
-          <Option name="inst_script"/>
-          <Option name="install_script"/>
-          <Option name="ipt_mangle_only_rulesets"/>
+          <Option name="inst_cmdline"></Option>
+          <Option name="inst_script"></Option>
+          <Option name="install_script"></Option>
+          <Option name="ipt_mangle_only_rulesets"></Option>
           <Option name="limit_suffix">/day</Option>
           <Option name="limit_value">0</Option>
           <Option name="linux24_ip_forward">0</Option>
@@ -18944,20 +18944,20 @@
           <Option name="log_level">debug</Option>
           <Option name="log_limit_suffix">/second</Option>
           <Option name="log_limit_value">0</Option>
-          <Option name="log_prefix"/>
+          <Option name="log_prefix"></Option>
           <Option name="log_tcp_opt">False</Option>
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">True</Option>
           <Option name="modulate_state">False</Option>
           <Option name="no_iochains_for_any">False</Option>
           <Option name="no_optimisation">False</Option>
-          <Option name="openbsd_path_pfctl"/>
-          <Option name="openbsd_path_sysctl"/>
+          <Option name="openbsd_path_pfctl"></Option>
+          <Option name="openbsd_path_sysctl"></Option>
           <Option name="pass_all_out">False</Option>
           <Option name="pf_do_scrub">True</Option>
           <Option name="pf_limit_frags">5000</Option>
           <Option name="pf_limit_states">10000</Option>
-          <Option name="pf_optimization"/>
+          <Option name="pf_optimization"></Option>
           <Option name="pf_scrub_fragm_crop">False</Option>
           <Option name="pf_scrub_fragm_drop_ovl">False</Option>
           <Option name="pf_scrub_maxmss">1460</Option>
@@ -18970,10 +18970,10 @@
           <Option name="pf_timeout_interval">10</Option>
           <Option name="platform">iptables</Option>
           <Option name="proxy_arp">False</Option>
-          <Option name="script_env_path"/>
-          <Option name="snmp_contact"/>
-          <Option name="snmp_description"/>
-          <Option name="snmp_location"/>
+          <Option name="script_env_path"></Option>
+          <Option name="snmp_contact"></Option>
+          <Option name="snmp_description"></Option>
+          <Option name="snmp_location"></Option>
           <Option name="use_ip_tool">False</Option>
           <Option name="use_numeric_log_levels">False</Option>
           <Option name="use_tables">True</Option>
@@ -19007,28 +19007,28 @@
               <ObjectRef ref="sysid0"/>
             </ItfOutb>
             <NATRuleOptions>
-              <Option name="action_on_reject"/>
+              <Option name="action_on_reject"></Option>
               <Option name="branch_id">id19787X55350</Option>
-              <Option name="classify_str"/>
-              <Option name="custom_str"/>
-              <Option name="ipf_route_opt_addr"/>
-              <Option name="ipf_route_opt_if"/>
+              <Option name="classify_str"></Option>
+              <Option name="custom_str"></Option>
+              <Option name="ipf_route_opt_addr"></Option>
+              <Option name="ipf_route_opt_if"></Option>
               <Option name="ipf_route_option">route_copy_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"/>
-              <Option name="ipt_iif"/>
+              <Option name="ipt_gw"></Option>
+              <Option name="ipt_iif"></Option>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"/>
+              <Option name="ipt_oif"></Option>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"/>
-              <Option name="pf_route_opt_if"/>
+              <Option name="pf_route_opt_addr"></Option>
+              <Option name="pf_route_opt_if"></Option>
               <Option name="pf_route_option">none</Option>
-              <Option name="rule_name_accounting"/>
+              <Option name="rule_name_accounting"></Option>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id19744X55350" disabled="False" group="" position="1" action="NATBranch" comment="">
@@ -19057,28 +19057,28 @@
               <ObjectRef ref="sysid0"/>
             </ItfOutb>
             <NATRuleOptions>
-              <Option name="action_on_reject"/>
+              <Option name="action_on_reject"></Option>
               <Option name="branch_id">id19772X55350</Option>
-              <Option name="classify_str"/>
-              <Option name="custom_str"/>
-              <Option name="ipf_route_opt_addr"/>
-              <Option name="ipf_route_opt_if"/>
+              <Option name="classify_str"></Option>
+              <Option name="custom_str"></Option>
+              <Option name="ipf_route_opt_addr"></Option>
+              <Option name="ipf_route_opt_if"></Option>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"/>
-              <Option name="ipt_iif"/>
+              <Option name="ipt_gw"></Option>
+              <Option name="ipt_iif"></Option>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"/>
+              <Option name="ipt_oif"></Option>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"/>
-              <Option name="pf_route_opt_if"/>
+              <Option name="pf_route_opt_addr"></Option>
+              <Option name="pf_route_opt_if"></Option>
               <Option name="pf_route_option">none</Option>
-              <Option name="rule_name_accounting"/>
+              <Option name="rule_name_accounting"></Option>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id19758X55350" disabled="False" group="" position="2" action="NATBranch" comment="">
@@ -19107,28 +19107,28 @@
               <ObjectRef ref="sysid0"/>
             </ItfOutb>
             <NATRuleOptions>
-              <Option name="action_on_reject"/>
+              <Option name="action_on_reject"></Option>
               <Option name="branch_id">id19772X55350</Option>
-              <Option name="classify_str"/>
-              <Option name="custom_str"/>
-              <Option name="ipf_route_opt_addr"/>
-              <Option name="ipf_route_opt_if"/>
+              <Option name="classify_str"></Option>
+              <Option name="custom_str"></Option>
+              <Option name="ipf_route_opt_addr"></Option>
+              <Option name="ipf_route_opt_if"></Option>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"/>
-              <Option name="ipt_iif"/>
+              <Option name="ipt_gw"></Option>
+              <Option name="ipt_iif"></Option>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"/>
+              <Option name="ipt_oif"></Option>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"/>
-              <Option name="pf_route_opt_if"/>
+              <Option name="pf_route_opt_addr"></Option>
+              <Option name="pf_route_opt_if"></Option>
               <Option name="pf_route_option">none</Option>
-              <Option name="rule_name_accounting"/>
+              <Option name="rule_name_accounting"></Option>
             </NATRuleOptions>
           </NATRule>
           <RuleSetOptions/>
@@ -19184,7 +19184,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -19214,39 +19214,39 @@
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
           <Option name="action_on_reject">ICMP net unreachable</Option>
-          <Option name="activationCmd"/>
-          <Option name="admUser"/>
-          <Option name="altAddress"/>
+          <Option name="activationCmd"></Option>
+          <Option name="admUser"></Option>
+          <Option name="altAddress"></Option>
           <Option name="check_shading">True</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
-          <Option name="cmdline"/>
-          <Option name="compiler"/>
-          <Option name="conf_file_name_on_firewall"/>
+          <Option name="cmdline"></Option>
+          <Option name="compiler"></Option>
+          <Option name="conf_file_name_on_firewall"></Option>
           <Option name="configure_carp_interfaces">False</Option>
           <Option name="configure_interfaces">False</Option>
           <Option name="configure_pfsync_interfaces">False</Option>
           <Option name="configure_vlan_interfaces">False</Option>
           <Option name="debug">False</Option>
           <Option name="dyn_addr">False</Option>
-          <Option name="epilog_script"/>
+          <Option name="epilog_script"></Option>
           <Option name="fallback_log">False</Option>
-          <Option name="firewall_dir"/>
+          <Option name="firewall_dir"></Option>
           <Option name="firewall_is_part_of_any">True</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
-          <Option name="freebsd_ip_forward"/>
-          <Option name="freebsd_ip_redirect"/>
-          <Option name="freebsd_ip_sourceroute"/>
-          <Option name="freebsd_ipv6_forward"/>
-          <Option name="freebsd_path_ipf"/>
-          <Option name="freebsd_path_ipnat"/>
+          <Option name="freebsd_ip_forward"></Option>
+          <Option name="freebsd_ip_redirect"></Option>
+          <Option name="freebsd_ip_sourceroute"></Option>
+          <Option name="freebsd_ipv6_forward"></Option>
+          <Option name="freebsd_path_ipf"></Option>
+          <Option name="freebsd_path_ipnat"></Option>
           <Option name="freebsd_path_pfctl">/usr/local/bin/pfctl</Option>
-          <Option name="freebsd_path_sysctl"/>
+          <Option name="freebsd_path_sysctl"></Option>
           <Option name="ignore_empty_groups">False</Option>
           <Option name="in_out_code">True</Option>
-          <Option name="inst_cmdline"/>
-          <Option name="inst_script"/>
-          <Option name="install_script"/>
-          <Option name="ipt_mangle_only_rulesets"/>
+          <Option name="inst_cmdline"></Option>
+          <Option name="inst_script"></Option>
+          <Option name="install_script"></Option>
+          <Option name="ipt_mangle_only_rulesets"></Option>
           <Option name="ipv4_6_order">ipv4_first</Option>
           <Option name="limit_suffix">/day</Option>
           <Option name="limit_value">0</Option>
@@ -19259,18 +19259,18 @@
           <Option name="log_level">debug</Option>
           <Option name="log_limit_suffix">/second</Option>
           <Option name="log_limit_value">0</Option>
-          <Option name="log_prefix"/>
+          <Option name="log_prefix"></Option>
           <Option name="log_tcp_opt">False</Option>
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"/>
+          <Option name="mgmt_addr"></Option>
           <Option name="mgmt_ssh">False</Option>
           <Option name="modulate_state">False</Option>
           <Option name="no_iochains_for_any">False</Option>
           <Option name="no_optimisation">False</Option>
-          <Option name="openbsd_path_pfctl"/>
-          <Option name="openbsd_path_sysctl"/>
-          <Option name="output_file"/>
+          <Option name="openbsd_path_pfctl"></Option>
+          <Option name="openbsd_path_sysctl"></Option>
+          <Option name="output_file"></Option>
           <Option name="pass_all_out">False</Option>
           <Option name="pf_adaptive_end">0</Option>
           <Option name="pf_adaptive_start">0</Option>
@@ -19291,7 +19291,7 @@
           <Option name="pf_limit_table_entries">0</Option>
           <Option name="pf_limit_tables">0</Option>
           <Option name="pf_modulate_state">False</Option>
-          <Option name="pf_optimization"/>
+          <Option name="pf_optimization"></Option>
           <Option name="pf_other_first">0</Option>
           <Option name="pf_other_multiple">0</Option>
           <Option name="pf_other_single">0</Option>
@@ -19333,15 +19333,15 @@
           <Option name="pf_udp_single">0</Option>
           <Option name="platform">iptables</Option>
           <Option name="prolog_place">fw_file</Option>
-          <Option name="prolog_script"/>
+          <Option name="prolog_script"></Option>
           <Option name="proxy_arp">False</Option>
-          <Option name="scpArgs"/>
-          <Option name="script_env_path"/>
-          <Option name="script_name_on_firewall"/>
-          <Option name="snmp_contact"/>
-          <Option name="snmp_description"/>
-          <Option name="snmp_location"/>
-          <Option name="sshArgs"/>
+          <Option name="scpArgs"></Option>
+          <Option name="script_env_path"></Option>
+          <Option name="script_name_on_firewall"></Option>
+          <Option name="snmp_contact"></Option>
+          <Option name="snmp_description"></Option>
+          <Option name="snmp_location"></Option>
+          <Option name="sshArgs"></Option>
           <Option name="use_ip_tool">False</Option>
           <Option name="use_numeric_log_levels">False</Option>
           <Option name="use_tables">True</Option>
@@ -19369,13 +19369,13 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_keep_state">False</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">0</Option>
@@ -19407,13 +19407,13 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_keep_state">True</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">0</Option>
@@ -19445,13 +19445,13 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_keep_state">False</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">0</Option>
@@ -19483,13 +19483,13 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_keep_state">False</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">10</Option>
@@ -19521,13 +19521,13 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_keep_state">False</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">10</Option>
@@ -19559,7 +19559,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -19590,14 +19590,14 @@
         </Management>
         <FirewallOptions>
           <Option name="check_shading">False</Option>
-          <Option name="cmdline"/>
-          <Option name="compiler"/>
+          <Option name="cmdline"></Option>
+          <Option name="compiler"></Option>
           <Option name="configure_interfaces">False</Option>
           <Option name="debug">False</Option>
           <Option name="firewall_dir">/etc</Option>
           <Option name="ignore_empty_groups">False</Option>
           <Option name="in_out_code">True</Option>
-          <Option name="log_prefix"/>
+          <Option name="log_prefix"></Option>
           <Option name="manage_virtual_addr">False</Option>
           <Option name="modulate_state">False</Option>
           <Option name="no_optimisation">False</Option>
@@ -19608,7 +19608,7 @@
           <Option name="pf_do_scrub">True</Option>
           <Option name="pf_limit_frags">5000</Option>
           <Option name="pf_limit_states">10000</Option>
-          <Option name="pf_optimization"/>
+          <Option name="pf_optimization"></Option>
           <Option name="pf_scrub_fragm_crop">False</Option>
           <Option name="pf_scrub_fragm_drop_ovl">False</Option>
           <Option name="pf_scrub_maxmss">1460</Option>
@@ -19619,9 +19619,9 @@
           <Option name="pf_scrub_use_minttl">False</Option>
           <Option name="pf_timeout_frag">30</Option>
           <Option name="pf_timeout_interval">10</Option>
-          <Option name="snmp_contact"/>
-          <Option name="snmp_description"/>
-          <Option name="snmp_location"/>
+          <Option name="snmp_contact"></Option>
+          <Option name="snmp_description"></Option>
+          <Option name="snmp_location"></Option>
           <Option name="use_tables">True</Option>
         </FirewallOptions>
       </Firewall>
@@ -19647,13 +19647,13 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_keep_state">False</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">0</Option>
@@ -19685,13 +19685,13 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_keep_state">True</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">0</Option>
@@ -19723,13 +19723,13 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_keep_state">False</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">0</Option>
@@ -19761,13 +19761,13 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_keep_state">False</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">10</Option>
@@ -19799,13 +19799,13 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_keep_state">False</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">10</Option>
@@ -19837,13 +19837,13 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_keep_state">False</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">10</Option>
@@ -19875,13 +19875,13 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_keep_state">False</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">10</Option>
@@ -19913,13 +19913,13 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_keep_state">False</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">0</Option>
@@ -19951,13 +19951,13 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_keep_state">False</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">0</Option>
@@ -19989,7 +19989,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -20020,14 +20020,14 @@
         </Management>
         <FirewallOptions>
           <Option name="check_shading">False</Option>
-          <Option name="cmdline"/>
-          <Option name="compiler"/>
+          <Option name="cmdline"></Option>
+          <Option name="compiler"></Option>
           <Option name="configure_interfaces">False</Option>
           <Option name="debug">False</Option>
           <Option name="firewall_dir">/etc</Option>
           <Option name="ignore_empty_groups">False</Option>
           <Option name="in_out_code">True</Option>
-          <Option name="log_prefix"/>
+          <Option name="log_prefix"></Option>
           <Option name="manage_virtual_addr">False</Option>
           <Option name="modulate_state">False</Option>
           <Option name="no_optimisation">False</Option>
@@ -20038,7 +20038,7 @@
           <Option name="pf_do_scrub">True</Option>
           <Option name="pf_limit_frags">5000</Option>
           <Option name="pf_limit_states">10000</Option>
-          <Option name="pf_optimization"/>
+          <Option name="pf_optimization"></Option>
           <Option name="pf_scrub_fragm_crop">False</Option>
           <Option name="pf_scrub_fragm_drop_ovl">False</Option>
           <Option name="pf_scrub_maxmss">1460</Option>
@@ -20049,9 +20049,9 @@
           <Option name="pf_scrub_use_minttl">False</Option>
           <Option name="pf_timeout_frag">30</Option>
           <Option name="pf_timeout_interval">10</Option>
-          <Option name="snmp_contact"/>
-          <Option name="snmp_description"/>
-          <Option name="snmp_location"/>
+          <Option name="snmp_contact"></Option>
+          <Option name="snmp_description"></Option>
+          <Option name="snmp_location"></Option>
           <Option name="use_tables">True</Option>
         </FirewallOptions>
       </Firewall>
@@ -20545,28 +20545,28 @@
               <ObjectRef ref="sysid0"/>
             </ItfOutb>
             <NATRuleOptions>
-              <Option name="action_on_reject"/>
+              <Option name="action_on_reject"></Option>
               <Option name="branch_id">id20900X27133</Option>
-              <Option name="classify_str"/>
-              <Option name="custom_str"/>
-              <Option name="ipf_route_opt_addr"/>
-              <Option name="ipf_route_opt_if"/>
+              <Option name="classify_str"></Option>
+              <Option name="custom_str"></Option>
+              <Option name="ipf_route_opt_addr"></Option>
+              <Option name="ipf_route_opt_if"></Option>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"/>
-              <Option name="ipt_iif"/>
+              <Option name="ipt_gw"></Option>
+              <Option name="ipt_iif"></Option>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"/>
+              <Option name="ipt_oif"></Option>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"/>
-              <Option name="pf_route_opt_if"/>
+              <Option name="pf_route_opt_addr"></Option>
+              <Option name="pf_route_opt_if"></Option>
               <Option name="pf_route_option">none</Option>
-              <Option name="rule_name_accounting"/>
+              <Option name="rule_name_accounting"></Option>
             </NATRuleOptions>
           </NATRule>
           <RuleSetOptions/>
@@ -20589,8 +20589,8 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="id"/>
-              <Option name="pf_classify_str"/>
+              <Option name="id"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -20627,31 +20627,31 @@
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
           <Option name="action_on_reject">ICMP net unreachable</Option>
-          <Option name="activationCmd"/>
-          <Option name="admUser"/>
-          <Option name="altAddress"/>
+          <Option name="activationCmd"></Option>
+          <Option name="admUser"></Option>
+          <Option name="altAddress"></Option>
           <Option name="check_shading">False</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
-          <Option name="cmdline"/>
-          <Option name="compiler"/>
-          <Option name="conf_file_name_on_firewall"/>
+          <Option name="cmdline"></Option>
+          <Option name="compiler"></Option>
+          <Option name="conf_file_name_on_firewall"></Option>
           <Option name="configure_carp_interfaces">False</Option>
           <Option name="configure_interfaces">False</Option>
           <Option name="configure_pfsync_interfaces">False</Option>
           <Option name="configure_vlan_interfaces">False</Option>
           <Option name="debug">False</Option>
           <Option name="dyn_addr">False</Option>
-          <Option name="epilog_script"/>
+          <Option name="epilog_script"></Option>
           <Option name="fallback_log">False</Option>
-          <Option name="firewall_dir"/>
+          <Option name="firewall_dir"></Option>
           <Option name="firewall_is_part_of_any">True</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
-          <Option name="id"/>
+          <Option name="id"></Option>
           <Option name="ignore_empty_groups">False</Option>
           <Option name="in_out_code">True</Option>
-          <Option name="inst_cmdline"/>
-          <Option name="inst_script"/>
-          <Option name="install_script"/>
+          <Option name="inst_cmdline"></Option>
+          <Option name="inst_script"></Option>
+          <Option name="install_script"></Option>
           <Option name="ipv4_6_order">ipv4_first</Option>
           <Option name="limit_suffix">/second</Option>
           <Option name="limit_value">0</Option>
@@ -20679,9 +20679,9 @@
           <Option name="modulate_state">False</Option>
           <Option name="no_iochains_for_any">False</Option>
           <Option name="no_optimisation">False</Option>
-          <Option name="openbsd_path_pfctl"/>
-          <Option name="openbsd_path_sysctl"/>
-          <Option name="output_file"/>
+          <Option name="openbsd_path_pfctl"></Option>
+          <Option name="openbsd_path_sysctl"></Option>
+          <Option name="output_file"></Option>
           <Option name="pass_all_out">False</Option>
           <Option name="pf_adaptive_end">0</Option>
           <Option name="pf_adaptive_start">0</Option>
@@ -20730,7 +20730,7 @@
           <Option name="pf_set_udp_first">False</Option>
           <Option name="pf_set_udp_multiple">False</Option>
           <Option name="pf_set_udp_single">False</Option>
-          <Option name="pf_state_policy"/>
+          <Option name="pf_state_policy"></Option>
           <Option name="pf_tcp_closed">0</Option>
           <Option name="pf_tcp_closing">0</Option>
           <Option name="pf_tcp_established">10</Option>
@@ -20748,13 +20748,13 @@
 # prolog commands go after set commands
 </Option>
           <Option name="proxy_arp">True</Option>
-          <Option name="scpArgs"/>
-          <Option name="script_env_path"/>
-          <Option name="script_name_on_firewall"/>
-          <Option name="snmp_contact"/>
-          <Option name="snmp_description"/>
-          <Option name="snmp_location"/>
-          <Option name="sshArgs"/>
+          <Option name="scpArgs"></Option>
+          <Option name="script_env_path"></Option>
+          <Option name="script_name_on_firewall"></Option>
+          <Option name="snmp_contact"></Option>
+          <Option name="snmp_description"></Option>
+          <Option name="snmp_location"></Option>
+          <Option name="sshArgs"></Option>
           <Option name="use_ip_tool">True</Option>
           <Option name="use_numeric_log_levels">False</Option>
           <Option name="use_tables">True</Option>
@@ -20782,7 +20782,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -20820,19 +20820,19 @@
         </Management>
         <FirewallOptions>
           <Option name="accept_new_tcp_with_no_syn">False</Option>
-          <Option name="activationCmd"/>
-          <Option name="admUser"/>
-          <Option name="altAddress"/>
+          <Option name="activationCmd"></Option>
+          <Option name="admUser"></Option>
+          <Option name="altAddress"></Option>
           <Option name="check_shading">True</Option>
-          <Option name="cmdline"/>
-          <Option name="compiler"/>
+          <Option name="cmdline"></Option>
+          <Option name="compiler"></Option>
           <Option name="conf_file_name_on_firewall">/etc/fw/pf.conf</Option>
           <Option name="configure_carp_interfaces">False</Option>
           <Option name="configure_interfaces">True</Option>
           <Option name="configure_pfsync_interfaces">False</Option>
           <Option name="configure_vlan_interfaces">True</Option>
           <Option name="debug">False</Option>
-          <Option name="epilog_script"/>
+          <Option name="epilog_script"></Option>
           <Option name="fallback_log">False</Option>
           <Option name="firewall_dir">/etc</Option>
           <Option name="ignore_empty_groups">False</Option>
@@ -20844,7 +20844,7 @@
           <Option name="mgmt_addr">10.3.14.30</Option>
           <Option name="mgmt_ssh">True</Option>
           <Option name="openbsd_ip_forward">1</Option>
-          <Option name="output_file"/>
+          <Option name="output_file"></Option>
           <Option name="pass_all_out">false</Option>
           <Option name="pf_adaptive_end">0</Option>
           <Option name="pf_adaptive_start">0</Option>
@@ -20865,7 +20865,7 @@
           <Option name="pf_limit_table_entries">0</Option>
           <Option name="pf_limit_tables">0</Option>
           <Option name="pf_modulate_state">False</Option>
-          <Option name="pf_optimization"/>
+          <Option name="pf_optimization"></Option>
           <Option name="pf_other_first">0</Option>
           <Option name="pf_other_multiple">0</Option>
           <Option name="pf_other_single">0</Option>
@@ -20894,7 +20894,7 @@
           <Option name="pf_set_udp_first">False</Option>
           <Option name="pf_set_udp_multiple">False</Option>
           <Option name="pf_set_udp_single">False</Option>
-          <Option name="pf_state_policy"/>
+          <Option name="pf_state_policy"></Option>
           <Option name="pf_tcp_closed">0</Option>
           <Option name="pf_tcp_closing">0</Option>
           <Option name="pf_tcp_established">0</Option>
@@ -20907,10 +20907,10 @@
           <Option name="pf_udp_multiple">0</Option>
           <Option name="pf_udp_single">0</Option>
           <Option name="prolog_place">fw_file</Option>
-          <Option name="prolog_script"/>
-          <Option name="scpArgs"/>
+          <Option name="prolog_script"></Option>
+          <Option name="scpArgs"></Option>
           <Option name="script_name_on_firewall">/etc/fw/pf.fw</Option>
-          <Option name="sshArgs"/>
+          <Option name="sshArgs"></Option>
         </FirewallOptions>
       </Firewall>
       <Firewall id="id21522X15225" host_OS="openbsd" inactive="False" lastCompiled="1267754603" lastInstalled="0" lastModified="1267754555" platform="pf" version="4.0" name="firewall14" comment="Testing scrub rules format  PF &lt; 4.6" ro="False">
@@ -20935,7 +20935,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -20973,19 +20973,19 @@
         </Management>
         <FirewallOptions>
           <Option name="accept_new_tcp_with_no_syn">False</Option>
-          <Option name="activationCmd"/>
-          <Option name="admUser"/>
-          <Option name="altAddress"/>
+          <Option name="activationCmd"></Option>
+          <Option name="admUser"></Option>
+          <Option name="altAddress"></Option>
           <Option name="check_shading">True</Option>
-          <Option name="cmdline"/>
-          <Option name="compiler"/>
-          <Option name="conf_file_name_on_firewall"/>
+          <Option name="cmdline"></Option>
+          <Option name="compiler"></Option>
+          <Option name="conf_file_name_on_firewall"></Option>
           <Option name="configure_carp_interfaces">False</Option>
           <Option name="configure_interfaces">True</Option>
           <Option name="configure_pfsync_interfaces">False</Option>
           <Option name="configure_vlan_interfaces">True</Option>
           <Option name="debug">False</Option>
-          <Option name="epilog_script"/>
+          <Option name="epilog_script"></Option>
           <Option name="fallback_log">False</Option>
           <Option name="firewall_dir">/etc</Option>
           <Option name="ignore_empty_groups">False</Option>
@@ -20997,7 +20997,7 @@
           <Option name="mgmt_addr">10.3.14.30</Option>
           <Option name="mgmt_ssh">True</Option>
           <Option name="openbsd_ip_forward">1</Option>
-          <Option name="output_file"/>
+          <Option name="output_file"></Option>
           <Option name="pass_all_out">false</Option>
           <Option name="pf_adaptive_end">0</Option>
           <Option name="pf_adaptive_start">0</Option>
@@ -21018,7 +21018,7 @@
           <Option name="pf_limit_table_entries">0</Option>
           <Option name="pf_limit_tables">0</Option>
           <Option name="pf_modulate_state">False</Option>
-          <Option name="pf_optimization"/>
+          <Option name="pf_optimization"></Option>
           <Option name="pf_other_first">0</Option>
           <Option name="pf_other_multiple">0</Option>
           <Option name="pf_other_single">0</Option>
@@ -21047,7 +21047,7 @@
           <Option name="pf_set_udp_first">False</Option>
           <Option name="pf_set_udp_multiple">False</Option>
           <Option name="pf_set_udp_single">False</Option>
-          <Option name="pf_state_policy"/>
+          <Option name="pf_state_policy"></Option>
           <Option name="pf_tcp_closed">0</Option>
           <Option name="pf_tcp_closing">0</Option>
           <Option name="pf_tcp_established">0</Option>
@@ -21060,10 +21060,10 @@
           <Option name="pf_udp_multiple">0</Option>
           <Option name="pf_udp_single">0</Option>
           <Option name="prolog_place">fw_file</Option>
-          <Option name="prolog_script"/>
-          <Option name="scpArgs"/>
-          <Option name="script_name_on_firewall"/>
-          <Option name="sshArgs"/>
+          <Option name="prolog_script"></Option>
+          <Option name="scpArgs"></Option>
+          <Option name="script_name_on_firewall"></Option>
+          <Option name="sshArgs"></Option>
         </FirewallOptions>
       </Firewall>
       <Firewall id="id21721X15225" host_OS="openbsd" inactive="False" lastCompiled="1267754604" lastInstalled="0" lastModified="1267754587" platform="pf" version="4.6" name="firewall14-1" comment="Testing scrub rules format  PF 4.6" ro="False">
@@ -21088,7 +21088,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -21126,19 +21126,19 @@
         </Management>
         <FirewallOptions>
           <Option name="accept_new_tcp_with_no_syn">False</Option>
-          <Option name="activationCmd"/>
-          <Option name="admUser"/>
-          <Option name="altAddress"/>
+          <Option name="activationCmd"></Option>
+          <Option name="admUser"></Option>
+          <Option name="altAddress"></Option>
           <Option name="check_shading">True</Option>
-          <Option name="cmdline"/>
-          <Option name="compiler"/>
-          <Option name="conf_file_name_on_firewall"/>
+          <Option name="cmdline"></Option>
+          <Option name="compiler"></Option>
+          <Option name="conf_file_name_on_firewall"></Option>
           <Option name="configure_carp_interfaces">False</Option>
           <Option name="configure_interfaces">True</Option>
           <Option name="configure_pfsync_interfaces">False</Option>
           <Option name="configure_vlan_interfaces">True</Option>
           <Option name="debug">False</Option>
-          <Option name="epilog_script"/>
+          <Option name="epilog_script"></Option>
           <Option name="fallback_log">False</Option>
           <Option name="firewall_dir">/etc</Option>
           <Option name="ignore_empty_groups">False</Option>
@@ -21150,7 +21150,7 @@
           <Option name="mgmt_addr">10.3.14.30</Option>
           <Option name="mgmt_ssh">True</Option>
           <Option name="openbsd_ip_forward">1</Option>
-          <Option name="output_file"/>
+          <Option name="output_file"></Option>
           <Option name="pass_all_out">false</Option>
           <Option name="pf_adaptive_end">0</Option>
           <Option name="pf_adaptive_start">0</Option>
@@ -21171,7 +21171,7 @@
           <Option name="pf_limit_table_entries">0</Option>
           <Option name="pf_limit_tables">0</Option>
           <Option name="pf_modulate_state">False</Option>
-          <Option name="pf_optimization"/>
+          <Option name="pf_optimization"></Option>
           <Option name="pf_other_first">0</Option>
           <Option name="pf_other_multiple">0</Option>
           <Option name="pf_other_single">0</Option>
@@ -21200,7 +21200,7 @@
           <Option name="pf_set_udp_first">False</Option>
           <Option name="pf_set_udp_multiple">False</Option>
           <Option name="pf_set_udp_single">False</Option>
-          <Option name="pf_state_policy"/>
+          <Option name="pf_state_policy"></Option>
           <Option name="pf_tcp_closed">0</Option>
           <Option name="pf_tcp_closing">0</Option>
           <Option name="pf_tcp_established">0</Option>
@@ -21213,10 +21213,10 @@
           <Option name="pf_udp_multiple">0</Option>
           <Option name="pf_udp_single">0</Option>
           <Option name="prolog_place">fw_file</Option>
-          <Option name="prolog_script"/>
-          <Option name="scpArgs"/>
-          <Option name="script_name_on_firewall"/>
-          <Option name="sshArgs"/>
+          <Option name="prolog_script"></Option>
+          <Option name="scpArgs"></Option>
+          <Option name="script_name_on_firewall"></Option>
+          <Option name="sshArgs"></Option>
         </FirewallOptions>
       </Firewall>
       <Firewall id="id22021X58767" host_OS="openbsd" inactive="False" lastCompiled="1286413975" lastInstalled="1271995582" lastModified="1307148472" platform="pf" version="4.7" name="firewall92" comment="syntax of the nat and rdr rules has changed in 4.7&#10;" ro="False">
@@ -21403,7 +21403,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -21424,7 +21424,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -21445,30 +21445,30 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
+              <Option name="action_on_reject"></Option>
               <Option name="classification">False</Option>
-              <Option name="classify_str"/>
-              <Option name="custom_str"/>
-              <Option name="ipf_route_opt_addr"/>
-              <Option name="ipf_route_opt_if"/>
+              <Option name="classify_str"></Option>
+              <Option name="custom_str"></Option>
+              <Option name="ipf_route_opt_addr"></Option>
+              <Option name="ipf_route_opt_if"></Option>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"/>
-              <Option name="ipt_iif"/>
+              <Option name="ipt_gw"></Option>
+              <Option name="ipt_iif"></Option>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"/>
+              <Option name="ipt_oif"></Option>
               <Option name="ipt_tee">False</Option>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"/>
-              <Option name="pf_route_opt_if"/>
+              <Option name="pf_route_opt_addr"></Option>
+              <Option name="pf_route_opt_if"></Option>
               <Option name="pf_route_option">none</Option>
               <Option name="routing">False</Option>
-              <Option name="rule_name_accounting"/>
+              <Option name="rule_name_accounting"></Option>
               <Option name="stateless">False</Option>
               <Option name="tagging">True</Option>
               <Option name="tagobject_id">id43F4556A28869</Option>
@@ -21491,7 +21491,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -21512,7 +21512,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -21536,19 +21536,19 @@
         </Management>
         <FirewallOptions>
           <Option name="accept_new_tcp_with_no_syn">False</Option>
-          <Option name="activationCmd"/>
+          <Option name="activationCmd"></Option>
           <Option name="admUser">root</Option>
-          <Option name="altAddress"/>
+          <Option name="altAddress"></Option>
           <Option name="check_shading">True</Option>
           <Option name="cmdline">-xt</Option>
-          <Option name="compiler"/>
+          <Option name="compiler"></Option>
           <Option name="conf_file_name_on_firewall">/etc/fw/path with space/pf.conf</Option>
           <Option name="configure_carp_interfaces">False</Option>
           <Option name="configure_interfaces">True</Option>
           <Option name="configure_pfsync_interfaces">False</Option>
           <Option name="configure_vlan_interfaces">False</Option>
           <Option name="debug">False</Option>
-          <Option name="epilog_script"/>
+          <Option name="epilog_script"></Option>
           <Option name="fallback_log">False</Option>
           <Option name="firewall_dir">/etc</Option>
           <Option name="ignore_empty_groups">False</Option>
@@ -21560,7 +21560,7 @@
           <Option name="mgmt_addr">10.3.14.30</Option>
           <Option name="mgmt_ssh">True</Option>
           <Option name="openbsd_ip_forward">1</Option>
-          <Option name="output_file"/>
+          <Option name="output_file"></Option>
           <Option name="pass_all_out">false</Option>
           <Option name="pf_adaptive_end">0</Option>
           <Option name="pf_adaptive_start">0</Option>
@@ -21581,7 +21581,7 @@
           <Option name="pf_limit_table_entries">0</Option>
           <Option name="pf_limit_tables">0</Option>
           <Option name="pf_modulate_state">False</Option>
-          <Option name="pf_optimization"/>
+          <Option name="pf_optimization"></Option>
           <Option name="pf_other_first">0</Option>
           <Option name="pf_other_multiple">0</Option>
           <Option name="pf_other_single">0</Option>
@@ -21610,7 +21610,7 @@
           <Option name="pf_set_udp_first">False</Option>
           <Option name="pf_set_udp_multiple">False</Option>
           <Option name="pf_set_udp_single">True</Option>
-          <Option name="pf_state_policy"/>
+          <Option name="pf_state_policy"></Option>
           <Option name="pf_tcp_closed">0</Option>
           <Option name="pf_tcp_closing">0</Option>
           <Option name="pf_tcp_established">0</Option>
@@ -21623,10 +21623,10 @@
           <Option name="pf_udp_multiple">0</Option>
           <Option name="pf_udp_single">5</Option>
           <Option name="prolog_place">fw_file</Option>
-          <Option name="prolog_script"/>
-          <Option name="scpArgs"/>
+          <Option name="prolog_script"></Option>
+          <Option name="scpArgs"></Option>
           <Option name="script_name_on_firewall">/etc/fw/pf.fw</Option>
-          <Option name="sshArgs"/>
+          <Option name="sshArgs"></Option>
         </FirewallOptions>
       </Firewall>
       <Firewall id="id32636X21143" host_OS="openbsd" inactive="False" lastCompiled="1296525125" lastInstalled="1271995582" lastModified="1297661451" platform="pf" version="4.7" name="firewall100" comment="routing rules" ro="False">
@@ -21651,7 +21651,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -21727,7 +21727,7 @@
             <Option name="enable_stp">False</Option>
             <Option name="iface_configure_mtu">True</Option>
             <Option name="iface_mtu">1490</Option>
-            <Option name="iface_options"/>
+            <Option name="iface_options"></Option>
             <Option name="type">ethernet</Option>
             <Option name="vlan_id">0</Option>
           </InterfaceOptions>
@@ -21743,19 +21743,19 @@
         </Management>
         <FirewallOptions>
           <Option name="accept_new_tcp_with_no_syn">False</Option>
-          <Option name="activationCmd"/>
+          <Option name="activationCmd"></Option>
           <Option name="admUser">root</Option>
-          <Option name="altAddress"/>
+          <Option name="altAddress"></Option>
           <Option name="check_shading">True</Option>
           <Option name="cmdline">-xt</Option>
-          <Option name="compiler"/>
+          <Option name="compiler"></Option>
           <Option name="conf_file_name_on_firewall">/etc/fw/path with space/pf.conf</Option>
           <Option name="configure_carp_interfaces">False</Option>
           <Option name="configure_interfaces">True</Option>
           <Option name="configure_pfsync_interfaces">False</Option>
           <Option name="configure_vlan_interfaces">False</Option>
           <Option name="debug">False</Option>
-          <Option name="epilog_script"/>
+          <Option name="epilog_script"></Option>
           <Option name="fallback_log">False</Option>
           <Option name="firewall_dir">/etc</Option>
           <Option name="ignore_empty_groups">False</Option>
@@ -21767,7 +21767,7 @@
           <Option name="mgmt_addr">10.3.14.30</Option>
           <Option name="mgmt_ssh">True</Option>
           <Option name="openbsd_ip_forward">1</Option>
-          <Option name="output_file"/>
+          <Option name="output_file"></Option>
           <Option name="pass_all_out">false</Option>
           <Option name="pf_adaptive_end">0</Option>
           <Option name="pf_adaptive_start">0</Option>
@@ -21788,7 +21788,7 @@
           <Option name="pf_limit_table_entries">0</Option>
           <Option name="pf_limit_tables">0</Option>
           <Option name="pf_modulate_state">False</Option>
-          <Option name="pf_optimization"/>
+          <Option name="pf_optimization"></Option>
           <Option name="pf_other_first">0</Option>
           <Option name="pf_other_multiple">0</Option>
           <Option name="pf_other_single">0</Option>
@@ -21817,7 +21817,7 @@
           <Option name="pf_set_udp_first">False</Option>
           <Option name="pf_set_udp_multiple">False</Option>
           <Option name="pf_set_udp_single">True</Option>
-          <Option name="pf_state_policy"/>
+          <Option name="pf_state_policy"></Option>
           <Option name="pf_tcp_closed">0</Option>
           <Option name="pf_tcp_closing">0</Option>
           <Option name="pf_tcp_established">0</Option>
@@ -21830,10 +21830,10 @@
           <Option name="pf_udp_multiple">0</Option>
           <Option name="pf_udp_single">5</Option>
           <Option name="prolog_place">fw_file</Option>
-          <Option name="prolog_script"/>
-          <Option name="scpArgs"/>
+          <Option name="prolog_script"></Option>
+          <Option name="scpArgs"></Option>
           <Option name="script_name_on_firewall">/etc/fw/pf.fw</Option>
-          <Option name="sshArgs"/>
+          <Option name="sshArgs"></Option>
         </FirewallOptions>
       </Firewall>
       <Firewall id="id32878X1082" host_OS="freebsd" inactive="False" lastCompiled="1296777918" lastInstalled="0" lastModified="1296687915" platform="pf" version="" name="firewall-ipv6-3" comment="" ro="False">
@@ -21858,7 +21858,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -21882,7 +21882,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -21932,19 +21932,19 @@
         <FirewallOptions>
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
-          <Option name="action_on_reject"/>
-          <Option name="activationCmd"/>
+          <Option name="action_on_reject"></Option>
+          <Option name="activationCmd"></Option>
           <Option name="add_check_state_rule">true</Option>
-          <Option name="admUser"/>
-          <Option name="altAddress"/>
+          <Option name="admUser"></Option>
+          <Option name="altAddress"></Option>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">True</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
           <Option name="classify_mark_terminating">False</Option>
           <Option name="cmdline">-xt</Option>
-          <Option name="compiler"/>
-          <Option name="conf1_file"/>
-          <Option name="conf_file_name_on_firewall"/>
+          <Option name="compiler"></Option>
+          <Option name="conf1_file"></Option>
+          <Option name="conf_file_name_on_firewall"></Option>
           <Option name="configure_carp_interfaces">True</Option>
           <Option name="configure_interfaces">True</Option>
           <Option name="configure_pfsync_interfaces">True</Option>
@@ -21953,18 +21953,18 @@
           <Option name="drop_invalid">False</Option>
           <Option name="eliminate_duplicates">true</Option>
           <Option name="enable_ipv6">True</Option>
-          <Option name="epilog_script"/>
+          <Option name="epilog_script"></Option>
           <Option name="fallback_log">False</Option>
           <Option name="firewall_dir">/etc</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="freebsd_ip_forward">1</Option>
-          <Option name="freebsd_ip_redirect"/>
-          <Option name="freebsd_ip_sourceroute"/>
+          <Option name="freebsd_ip_redirect"></Option>
+          <Option name="freebsd_ip_sourceroute"></Option>
           <Option name="freebsd_ipv6_forward">1</Option>
-          <Option name="freebsd_path_ipf"/>
-          <Option name="freebsd_path_ipfw"/>
-          <Option name="freebsd_path_ipnat"/>
-          <Option name="freebsd_path_sysctl"/>
+          <Option name="freebsd_path_ipf"></Option>
+          <Option name="freebsd_path_ipfw"></Option>
+          <Option name="freebsd_path_ipnat"></Option>
+          <Option name="freebsd_path_sysctl"></Option>
           <Option name="generate_rc_conf_file">True</Option>
           <Option name="generate_shell_script">False</Option>
           <Option name="ignore_empty_groups">False</Option>
@@ -21973,7 +21973,7 @@
           <Option name="iosacl_assume_fw_part_of_any">true</Option>
           <Option name="iosacl_include_comments">true</Option>
           <Option name="ipv4_6_order">ipv4_first</Option>
-          <Option name="limit_suffix"/>
+          <Option name="limit_suffix"></Option>
           <Option name="limit_value">0</Option>
           <Option name="linux24_ip_forward">1</Option>
           <Option name="load_modules">True</Option>
@@ -21988,18 +21988,18 @@
           <Option name="loopback_interface">lo0</Option>
           <Option name="macosx_ip_forward">1</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"/>
+          <Option name="mgmt_addr"></Option>
           <Option name="mgmt_ssh">False</Option>
           <Option name="modulate_state">False</Option>
           <Option name="no_ipv6_default_policy">False</Option>
-          <Option name="openbsd_ip_directed_broadcast"/>
+          <Option name="openbsd_ip_directed_broadcast"></Option>
           <Option name="openbsd_ip_forward">1</Option>
-          <Option name="openbsd_ip_redirect"/>
-          <Option name="openbsd_ip_sourceroute"/>
+          <Option name="openbsd_ip_redirect"></Option>
+          <Option name="openbsd_ip_sourceroute"></Option>
           <Option name="openbsd_ipv6_forward">1</Option>
-          <Option name="openbsd_path_pfctl"/>
-          <Option name="openbsd_path_sysctl"/>
-          <Option name="output_file"/>
+          <Option name="openbsd_path_pfctl"></Option>
+          <Option name="openbsd_path_sysctl"></Option>
+          <Option name="output_file"></Option>
           <Option name="pass_all_out">False</Option>
           <Option name="pf_adaptive_end">0</Option>
           <Option name="pf_adaptive_start">0</Option>
@@ -22020,7 +22020,7 @@
           <Option name="pf_limit_table_entries">0</Option>
           <Option name="pf_limit_tables">0</Option>
           <Option name="pf_modulate_state">False</Option>
-          <Option name="pf_optimization"/>
+          <Option name="pf_optimization"></Option>
           <Option name="pf_other_first">0</Option>
           <Option name="pf_other_multiple">0</Option>
           <Option name="pf_other_single">0</Option>
@@ -22049,7 +22049,7 @@
           <Option name="pf_set_udp_first">False</Option>
           <Option name="pf_set_udp_multiple">False</Option>
           <Option name="pf_set_udp_single">False</Option>
-          <Option name="pf_state_policy"/>
+          <Option name="pf_state_policy"></Option>
           <Option name="pf_tcp_closed">0</Option>
           <Option name="pf_tcp_closing">0</Option>
           <Option name="pf_tcp_established">0</Option>
@@ -22074,13 +22074,13 @@
           <Option name="pix_syslog_device_id_supported">false</Option>
           <Option name="pix_use_acl_remarks">true</Option>
           <Option name="prolog_place">fw_file</Option>
-          <Option name="prolog_script"/>
+          <Option name="prolog_script"></Option>
           <Option name="prompt1">$ </Option>
           <Option name="prompt2"> # </Option>
-          <Option name="scpArgs"/>
-          <Option name="script_name_on_firewall"/>
+          <Option name="scpArgs"></Option>
+          <Option name="script_name_on_firewall"></Option>
           <Option name="solaris_ip_forward">1</Option>
-          <Option name="sshArgs"/>
+          <Option name="sshArgs"></Option>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -22112,7 +22112,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -22188,7 +22188,7 @@
             <Option name="enable_stp">False</Option>
             <Option name="iface_configure_mtu">True</Option>
             <Option name="iface_mtu">1490</Option>
-            <Option name="iface_options"/>
+            <Option name="iface_options"></Option>
             <Option name="type">ethernet</Option>
             <Option name="vlan_id">0</Option>
           </InterfaceOptions>
@@ -22204,13 +22204,13 @@
         </Management>
         <FirewallOptions>
           <Option name="accept_new_tcp_with_no_syn">False</Option>
-          <Option name="activationCmd"/>
+          <Option name="activationCmd"></Option>
           <Option name="admUser">root</Option>
-          <Option name="altAddress"/>
+          <Option name="altAddress"></Option>
           <Option name="check_shading">True</Option>
           <Option name="cmdline">-xt</Option>
-          <Option name="compiler"/>
-          <Option name="conf1_file"/>
+          <Option name="compiler"></Option>
+          <Option name="conf1_file"></Option>
           <Option name="conf_file_name_on_firewall">/etc/fw/path with space/pf.conf</Option>
           <Option name="configure_bridge_interfaces">False</Option>
           <Option name="configure_carp_interfaces">False</Option>
@@ -22218,7 +22218,7 @@
           <Option name="configure_pfsync_interfaces">False</Option>
           <Option name="configure_vlan_interfaces">False</Option>
           <Option name="debug">False</Option>
-          <Option name="epilog_script"/>
+          <Option name="epilog_script"></Option>
           <Option name="fallback_log">False</Option>
           <Option name="firewall_dir">/etc</Option>
           <Option name="freebsd_ip_forward">1</Option>
@@ -22233,7 +22233,7 @@
           <Option name="mgmt_addr">10.3.14.30</Option>
           <Option name="mgmt_ssh">True</Option>
           <Option name="openbsd_ip_forward">1</Option>
-          <Option name="output_file"/>
+          <Option name="output_file"></Option>
           <Option name="pass_all_out">false</Option>
           <Option name="pf_adaptive_end">0</Option>
           <Option name="pf_adaptive_start">0</Option>
@@ -22254,7 +22254,7 @@
           <Option name="pf_limit_table_entries">0</Option>
           <Option name="pf_limit_tables">0</Option>
           <Option name="pf_modulate_state">False</Option>
-          <Option name="pf_optimization"/>
+          <Option name="pf_optimization"></Option>
           <Option name="pf_other_first">0</Option>
           <Option name="pf_other_multiple">0</Option>
           <Option name="pf_other_single">0</Option>
@@ -22283,7 +22283,7 @@
           <Option name="pf_set_udp_first">False</Option>
           <Option name="pf_set_udp_multiple">False</Option>
           <Option name="pf_set_udp_single">True</Option>
-          <Option name="pf_state_policy"/>
+          <Option name="pf_state_policy"></Option>
           <Option name="pf_tcp_closed">0</Option>
           <Option name="pf_tcp_closing">0</Option>
           <Option name="pf_tcp_established">0</Option>
@@ -22296,10 +22296,10 @@
           <Option name="pf_udp_multiple">0</Option>
           <Option name="pf_udp_single">5</Option>
           <Option name="prolog_place">fw_file</Option>
-          <Option name="prolog_script"/>
-          <Option name="scpArgs"/>
+          <Option name="prolog_script"></Option>
+          <Option name="scpArgs"></Option>
           <Option name="script_name_on_firewall">/etc/fw/pf.fw</Option>
-          <Option name="sshArgs"/>
+          <Option name="sshArgs"></Option>
         </FirewallOptions>
       </Firewall>
       <Firewall id="id33316X5965" host_OS="freebsd" inactive="False" lastCompiled="1296525125" lastInstalled="1271995582" lastModified="1297661443" platform="pf" version="4.7" name="firewall102" comment="routing rules, rc.conf format" ro="False">
@@ -22324,7 +22324,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -22400,7 +22400,7 @@
             <Option name="enable_stp">False</Option>
             <Option name="iface_configure_mtu">True</Option>
             <Option name="iface_mtu">1490</Option>
-            <Option name="iface_options"/>
+            <Option name="iface_options"></Option>
             <Option name="type">ethernet</Option>
             <Option name="vlan_id">0</Option>
           </InterfaceOptions>
@@ -22416,20 +22416,20 @@
         </Management>
         <FirewallOptions>
           <Option name="accept_new_tcp_with_no_syn">False</Option>
-          <Option name="activationCmd"/>
+          <Option name="activationCmd"></Option>
           <Option name="admUser">root</Option>
-          <Option name="altAddress"/>
+          <Option name="altAddress"></Option>
           <Option name="check_shading">True</Option>
           <Option name="cmdline">-xt</Option>
-          <Option name="compiler"/>
-          <Option name="conf1_file"/>
+          <Option name="compiler"></Option>
+          <Option name="conf1_file"></Option>
           <Option name="conf_file_name_on_firewall">/etc/fw/path with space/pf.conf</Option>
           <Option name="configure_carp_interfaces">False</Option>
           <Option name="configure_interfaces">True</Option>
           <Option name="configure_pfsync_interfaces">False</Option>
           <Option name="configure_vlan_interfaces">False</Option>
           <Option name="debug">False</Option>
-          <Option name="epilog_script"/>
+          <Option name="epilog_script"></Option>
           <Option name="fallback_log">False</Option>
           <Option name="firewall_dir">/etc</Option>
           <Option name="freebsd_ip_forward">1</Option>
@@ -22444,7 +22444,7 @@
           <Option name="mgmt_addr">10.3.14.30</Option>
           <Option name="mgmt_ssh">True</Option>
           <Option name="openbsd_ip_forward">1</Option>
-          <Option name="output_file"/>
+          <Option name="output_file"></Option>
           <Option name="pass_all_out">false</Option>
           <Option name="pf_adaptive_end">0</Option>
           <Option name="pf_adaptive_start">0</Option>
@@ -22465,7 +22465,7 @@
           <Option name="pf_limit_table_entries">0</Option>
           <Option name="pf_limit_tables">0</Option>
           <Option name="pf_modulate_state">False</Option>
-          <Option name="pf_optimization"/>
+          <Option name="pf_optimization"></Option>
           <Option name="pf_other_first">0</Option>
           <Option name="pf_other_multiple">0</Option>
           <Option name="pf_other_single">0</Option>
@@ -22494,7 +22494,7 @@
           <Option name="pf_set_udp_first">False</Option>
           <Option name="pf_set_udp_multiple">False</Option>
           <Option name="pf_set_udp_single">True</Option>
-          <Option name="pf_state_policy"/>
+          <Option name="pf_state_policy"></Option>
           <Option name="pf_tcp_closed">0</Option>
           <Option name="pf_tcp_closing">0</Option>
           <Option name="pf_tcp_established">0</Option>
@@ -22507,10 +22507,10 @@
           <Option name="pf_udp_multiple">0</Option>
           <Option name="pf_udp_single">5</Option>
           <Option name="prolog_place">fw_file</Option>
-          <Option name="prolog_script"/>
-          <Option name="scpArgs"/>
+          <Option name="prolog_script"></Option>
+          <Option name="scpArgs"></Option>
           <Option name="script_name_on_firewall">/etc/fw/pf.fw</Option>
-          <Option name="sshArgs"/>
+          <Option name="sshArgs"></Option>
         </FirewallOptions>
       </Firewall>
       <Firewall id="id33552X2131" host_OS="freebsd" inactive="False" lastCompiled="1296525125" lastInstalled="1271995582" lastModified="1297029283" platform="pf" version="4.7" name="firewall103" comment="bridge interface, static address, shell script format" ro="False">
@@ -22535,7 +22535,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -22576,13 +22576,13 @@
         </Management>
         <FirewallOptions>
           <Option name="accept_new_tcp_with_no_syn">False</Option>
-          <Option name="activationCmd"/>
+          <Option name="activationCmd"></Option>
           <Option name="admUser">root</Option>
-          <Option name="altAddress"/>
+          <Option name="altAddress"></Option>
           <Option name="check_shading">True</Option>
           <Option name="cmdline">-xt</Option>
-          <Option name="compiler"/>
-          <Option name="conf1_file"/>
+          <Option name="compiler"></Option>
+          <Option name="conf1_file"></Option>
           <Option name="conf_file_name_on_firewall">/etc/fw/path with space/pf.conf</Option>
           <Option name="configure_bridge_interfaces">True</Option>
           <Option name="configure_carp_interfaces">True</Option>
@@ -22590,7 +22590,7 @@
           <Option name="configure_pfsync_interfaces">True</Option>
           <Option name="configure_vlan_interfaces">True</Option>
           <Option name="debug">False</Option>
-          <Option name="epilog_script"/>
+          <Option name="epilog_script"></Option>
           <Option name="fallback_log">False</Option>
           <Option name="firewall_dir">/etc</Option>
           <Option name="freebsd_ip_forward">1</Option>
@@ -22605,7 +22605,7 @@
           <Option name="mgmt_addr">10.3.14.30</Option>
           <Option name="mgmt_ssh">True</Option>
           <Option name="openbsd_ip_forward">1</Option>
-          <Option name="output_file"/>
+          <Option name="output_file"></Option>
           <Option name="pass_all_out">false</Option>
           <Option name="pf_adaptive_end">0</Option>
           <Option name="pf_adaptive_start">0</Option>
@@ -22626,7 +22626,7 @@
           <Option name="pf_limit_table_entries">0</Option>
           <Option name="pf_limit_tables">0</Option>
           <Option name="pf_modulate_state">False</Option>
-          <Option name="pf_optimization"/>
+          <Option name="pf_optimization"></Option>
           <Option name="pf_other_first">0</Option>
           <Option name="pf_other_multiple">0</Option>
           <Option name="pf_other_single">0</Option>
@@ -22655,7 +22655,7 @@
           <Option name="pf_set_udp_first">False</Option>
           <Option name="pf_set_udp_multiple">False</Option>
           <Option name="pf_set_udp_single">True</Option>
-          <Option name="pf_state_policy"/>
+          <Option name="pf_state_policy"></Option>
           <Option name="pf_tcp_closed">0</Option>
           <Option name="pf_tcp_closing">0</Option>
           <Option name="pf_tcp_established">0</Option>
@@ -22668,10 +22668,10 @@
           <Option name="pf_udp_multiple">0</Option>
           <Option name="pf_udp_single">5</Option>
           <Option name="prolog_place">fw_file</Option>
-          <Option name="prolog_script"/>
-          <Option name="scpArgs"/>
+          <Option name="prolog_script"></Option>
+          <Option name="scpArgs"></Option>
           <Option name="script_name_on_firewall">/etc/fw/pf.fw</Option>
-          <Option name="sshArgs"/>
+          <Option name="sshArgs"></Option>
         </FirewallOptions>
       </Firewall>
       <Firewall id="id33908X2131" host_OS="freebsd" inactive="False" lastCompiled="1296525125" lastInstalled="1271995582" lastModified="1297725454" platform="pf" version="4.7" name="firewall104" comment="bridge interface, dynamic  address, shell script format, with STP" ro="False">
@@ -22696,7 +22696,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -22718,7 +22718,7 @@
             <Option name="enable_stp">True</Option>
             <Option name="iface_configure_mtu">False</Option>
             <Option name="iface_mtu">1500</Option>
-            <Option name="iface_options"/>
+            <Option name="iface_options"></Option>
             <Option name="type">bridge</Option>
             <Option name="vlan_id">0</Option>
           </InterfaceOptions>
@@ -22740,13 +22740,13 @@
         </Management>
         <FirewallOptions>
           <Option name="accept_new_tcp_with_no_syn">False</Option>
-          <Option name="activationCmd"/>
+          <Option name="activationCmd"></Option>
           <Option name="admUser">root</Option>
-          <Option name="altAddress"/>
+          <Option name="altAddress"></Option>
           <Option name="check_shading">True</Option>
           <Option name="cmdline">-xt</Option>
-          <Option name="compiler"/>
-          <Option name="conf1_file"/>
+          <Option name="compiler"></Option>
+          <Option name="conf1_file"></Option>
           <Option name="conf_file_name_on_firewall">/etc/fw/path with space/pf.conf</Option>
           <Option name="configure_bridge_interfaces">True</Option>
           <Option name="configure_carp_interfaces">True</Option>
@@ -22754,7 +22754,7 @@
           <Option name="configure_pfsync_interfaces">True</Option>
           <Option name="configure_vlan_interfaces">True</Option>
           <Option name="debug">False</Option>
-          <Option name="epilog_script"/>
+          <Option name="epilog_script"></Option>
           <Option name="fallback_log">False</Option>
           <Option name="firewall_dir">/etc</Option>
           <Option name="freebsd_ip_forward">1</Option>
@@ -22769,7 +22769,7 @@
           <Option name="mgmt_addr">10.3.14.30</Option>
           <Option name="mgmt_ssh">True</Option>
           <Option name="openbsd_ip_forward">1</Option>
-          <Option name="output_file"/>
+          <Option name="output_file"></Option>
           <Option name="pass_all_out">false</Option>
           <Option name="pf_adaptive_end">0</Option>
           <Option name="pf_adaptive_start">0</Option>
@@ -22790,7 +22790,7 @@
           <Option name="pf_limit_table_entries">0</Option>
           <Option name="pf_limit_tables">0</Option>
           <Option name="pf_modulate_state">False</Option>
-          <Option name="pf_optimization"/>
+          <Option name="pf_optimization"></Option>
           <Option name="pf_other_first">0</Option>
           <Option name="pf_other_multiple">0</Option>
           <Option name="pf_other_single">0</Option>
@@ -22819,7 +22819,7 @@
           <Option name="pf_set_udp_first">False</Option>
           <Option name="pf_set_udp_multiple">False</Option>
           <Option name="pf_set_udp_single">True</Option>
-          <Option name="pf_state_policy"/>
+          <Option name="pf_state_policy"></Option>
           <Option name="pf_tcp_closed">0</Option>
           <Option name="pf_tcp_closing">0</Option>
           <Option name="pf_tcp_established">0</Option>
@@ -22832,10 +22832,10 @@
           <Option name="pf_udp_multiple">0</Option>
           <Option name="pf_udp_single">5</Option>
           <Option name="prolog_place">fw_file</Option>
-          <Option name="prolog_script"/>
-          <Option name="scpArgs"/>
+          <Option name="prolog_script"></Option>
+          <Option name="scpArgs"></Option>
           <Option name="script_name_on_firewall">/etc/fw/pf.fw</Option>
-          <Option name="sshArgs"/>
+          <Option name="sshArgs"></Option>
         </FirewallOptions>
       </Firewall>
       <Firewall id="id34168X2131" host_OS="freebsd" inactive="False" lastCompiled="1296525125" lastInstalled="1271995582" lastModified="1297029297" platform="pf" version="4.7" name="firewall105" comment="bridge interface, static address, rc.conf format" ro="False">
@@ -22860,7 +22860,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -22901,13 +22901,13 @@
         </Management>
         <FirewallOptions>
           <Option name="accept_new_tcp_with_no_syn">False</Option>
-          <Option name="activationCmd"/>
+          <Option name="activationCmd"></Option>
           <Option name="admUser">root</Option>
-          <Option name="altAddress"/>
+          <Option name="altAddress"></Option>
           <Option name="check_shading">True</Option>
           <Option name="cmdline">-xt</Option>
-          <Option name="compiler"/>
-          <Option name="conf1_file"/>
+          <Option name="compiler"></Option>
+          <Option name="conf1_file"></Option>
           <Option name="conf_file_name_on_firewall">/etc/fw/path with space/pf.conf</Option>
           <Option name="configure_bridge_interfaces">True</Option>
           <Option name="configure_carp_interfaces">True</Option>
@@ -22915,7 +22915,7 @@
           <Option name="configure_pfsync_interfaces">True</Option>
           <Option name="configure_vlan_interfaces">True</Option>
           <Option name="debug">False</Option>
-          <Option name="epilog_script"/>
+          <Option name="epilog_script"></Option>
           <Option name="fallback_log">False</Option>
           <Option name="firewall_dir">/etc</Option>
           <Option name="freebsd_ip_forward">1</Option>
@@ -22930,7 +22930,7 @@
           <Option name="mgmt_addr">10.3.14.30</Option>
           <Option name="mgmt_ssh">True</Option>
           <Option name="openbsd_ip_forward">1</Option>
-          <Option name="output_file"/>
+          <Option name="output_file"></Option>
           <Option name="pass_all_out">false</Option>
           <Option name="pf_adaptive_end">0</Option>
           <Option name="pf_adaptive_start">0</Option>
@@ -22951,7 +22951,7 @@
           <Option name="pf_limit_table_entries">0</Option>
           <Option name="pf_limit_tables">0</Option>
           <Option name="pf_modulate_state">False</Option>
-          <Option name="pf_optimization"/>
+          <Option name="pf_optimization"></Option>
           <Option name="pf_other_first">0</Option>
           <Option name="pf_other_multiple">0</Option>
           <Option name="pf_other_single">0</Option>
@@ -22980,7 +22980,7 @@
           <Option name="pf_set_udp_first">False</Option>
           <Option name="pf_set_udp_multiple">False</Option>
           <Option name="pf_set_udp_single">True</Option>
-          <Option name="pf_state_policy"/>
+          <Option name="pf_state_policy"></Option>
           <Option name="pf_tcp_closed">0</Option>
           <Option name="pf_tcp_closing">0</Option>
           <Option name="pf_tcp_established">0</Option>
@@ -22993,10 +22993,10 @@
           <Option name="pf_udp_multiple">0</Option>
           <Option name="pf_udp_single">5</Option>
           <Option name="prolog_place">fw_file</Option>
-          <Option name="prolog_script"/>
-          <Option name="scpArgs"/>
+          <Option name="prolog_script"></Option>
+          <Option name="scpArgs"></Option>
           <Option name="script_name_on_firewall">/etc/fw/pf.fw</Option>
-          <Option name="sshArgs"/>
+          <Option name="sshArgs"></Option>
         </FirewallOptions>
       </Firewall>
       <Firewall id="id34447X2131" host_OS="freebsd" inactive="False" lastCompiled="1296525125" lastInstalled="1271995582" lastModified="1297725471" platform="pf" version="4.7" name="firewall106" comment="bridge interface, dynamic  address, rc.conf format, with STP" ro="False">
@@ -23021,7 +23021,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -23104,7 +23104,7 @@
             <Option name="enable_stp">True</Option>
             <Option name="iface_configure_mtu">False</Option>
             <Option name="iface_mtu">1500</Option>
-            <Option name="iface_options"/>
+            <Option name="iface_options"></Option>
             <Option name="type">bridge</Option>
             <Option name="vlan_id">0</Option>
           </InterfaceOptions>
@@ -23126,13 +23126,13 @@
         </Management>
         <FirewallOptions>
           <Option name="accept_new_tcp_with_no_syn">False</Option>
-          <Option name="activationCmd"/>
+          <Option name="activationCmd"></Option>
           <Option name="admUser">root</Option>
-          <Option name="altAddress"/>
+          <Option name="altAddress"></Option>
           <Option name="check_shading">True</Option>
           <Option name="cmdline">-xt</Option>
-          <Option name="compiler"/>
-          <Option name="conf1_file"/>
+          <Option name="compiler"></Option>
+          <Option name="conf1_file"></Option>
           <Option name="conf_file_name_on_firewall">/etc/fw/path with space/pf.conf</Option>
           <Option name="configure_bridge_interfaces">True</Option>
           <Option name="configure_carp_interfaces">True</Option>
@@ -23140,7 +23140,7 @@
           <Option name="configure_pfsync_interfaces">True</Option>
           <Option name="configure_vlan_interfaces">True</Option>
           <Option name="debug">False</Option>
-          <Option name="epilog_script"/>
+          <Option name="epilog_script"></Option>
           <Option name="fallback_log">False</Option>
           <Option name="firewall_dir">/etc</Option>
           <Option name="freebsd_ip_forward">1</Option>
@@ -23155,7 +23155,7 @@
           <Option name="mgmt_addr">10.3.14.30</Option>
           <Option name="mgmt_ssh">True</Option>
           <Option name="openbsd_ip_forward">1</Option>
-          <Option name="output_file"/>
+          <Option name="output_file"></Option>
           <Option name="pass_all_out">false</Option>
           <Option name="pf_adaptive_end">0</Option>
           <Option name="pf_adaptive_start">0</Option>
@@ -23176,7 +23176,7 @@
           <Option name="pf_limit_table_entries">0</Option>
           <Option name="pf_limit_tables">0</Option>
           <Option name="pf_modulate_state">False</Option>
-          <Option name="pf_optimization"/>
+          <Option name="pf_optimization"></Option>
           <Option name="pf_other_first">0</Option>
           <Option name="pf_other_multiple">0</Option>
           <Option name="pf_other_single">0</Option>
@@ -23205,7 +23205,7 @@
           <Option name="pf_set_udp_first">False</Option>
           <Option name="pf_set_udp_multiple">False</Option>
           <Option name="pf_set_udp_single">True</Option>
-          <Option name="pf_state_policy"/>
+          <Option name="pf_state_policy"></Option>
           <Option name="pf_tcp_closed">0</Option>
           <Option name="pf_tcp_closing">0</Option>
           <Option name="pf_tcp_established">0</Option>
@@ -23218,10 +23218,10 @@
           <Option name="pf_udp_multiple">0</Option>
           <Option name="pf_udp_single">5</Option>
           <Option name="prolog_place">fw_file</Option>
-          <Option name="prolog_script"/>
-          <Option name="scpArgs"/>
+          <Option name="prolog_script"></Option>
+          <Option name="scpArgs"></Option>
           <Option name="script_name_on_firewall">/etc/fw/pf.fw</Option>
-          <Option name="sshArgs"/>
+          <Option name="sshArgs"></Option>
         </FirewallOptions>
       </Firewall>
       <Firewall id="id34184X23052" host_OS="freebsd" inactive="False" lastCompiled="1296525125" lastInstalled="1271995582" lastModified="1297116311" platform="pf" version="4.7" name="firewall107" comment="vlan interface, static address, shell script format" ro="False">
@@ -23246,7 +23246,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -23289,13 +23289,13 @@
         </Management>
         <FirewallOptions>
           <Option name="accept_new_tcp_with_no_syn">False</Option>
-          <Option name="activationCmd"/>
+          <Option name="activationCmd"></Option>
           <Option name="admUser">root</Option>
-          <Option name="altAddress"/>
+          <Option name="altAddress"></Option>
           <Option name="check_shading">True</Option>
           <Option name="cmdline">-xt</Option>
-          <Option name="compiler"/>
-          <Option name="conf1_file"/>
+          <Option name="compiler"></Option>
+          <Option name="conf1_file"></Option>
           <Option name="conf_file_name_on_firewall">/etc/fw/path with space/pf.conf</Option>
           <Option name="configure_bridge_interfaces">True</Option>
           <Option name="configure_carp_interfaces">True</Option>
@@ -23303,7 +23303,7 @@
           <Option name="configure_pfsync_interfaces">True</Option>
           <Option name="configure_vlan_interfaces">True</Option>
           <Option name="debug">False</Option>
-          <Option name="epilog_script"/>
+          <Option name="epilog_script"></Option>
           <Option name="fallback_log">False</Option>
           <Option name="firewall_dir">/etc</Option>
           <Option name="freebsd_ip_forward">1</Option>
@@ -23318,7 +23318,7 @@
           <Option name="mgmt_addr">10.3.14.30</Option>
           <Option name="mgmt_ssh">True</Option>
           <Option name="openbsd_ip_forward">1</Option>
-          <Option name="output_file"/>
+          <Option name="output_file"></Option>
           <Option name="pass_all_out">false</Option>
           <Option name="pf_adaptive_end">0</Option>
           <Option name="pf_adaptive_start">0</Option>
@@ -23339,7 +23339,7 @@
           <Option name="pf_limit_table_entries">0</Option>
           <Option name="pf_limit_tables">0</Option>
           <Option name="pf_modulate_state">False</Option>
-          <Option name="pf_optimization"/>
+          <Option name="pf_optimization"></Option>
           <Option name="pf_other_first">0</Option>
           <Option name="pf_other_multiple">0</Option>
           <Option name="pf_other_single">0</Option>
@@ -23368,7 +23368,7 @@
           <Option name="pf_set_udp_first">False</Option>
           <Option name="pf_set_udp_multiple">False</Option>
           <Option name="pf_set_udp_single">True</Option>
-          <Option name="pf_state_policy"/>
+          <Option name="pf_state_policy"></Option>
           <Option name="pf_tcp_closed">0</Option>
           <Option name="pf_tcp_closing">0</Option>
           <Option name="pf_tcp_established">0</Option>
@@ -23381,10 +23381,10 @@
           <Option name="pf_udp_multiple">0</Option>
           <Option name="pf_udp_single">5</Option>
           <Option name="prolog_place">fw_file</Option>
-          <Option name="prolog_script"/>
-          <Option name="scpArgs"/>
+          <Option name="prolog_script"></Option>
+          <Option name="scpArgs"></Option>
           <Option name="script_name_on_firewall">/etc/fw/pf.fw</Option>
-          <Option name="sshArgs"/>
+          <Option name="sshArgs"></Option>
         </FirewallOptions>
       </Firewall>
       <Firewall id="id34409X23052" host_OS="freebsd" inactive="False" lastCompiled="1296525125" lastInstalled="1271995582" lastModified="1297116315" platform="pf" version="4.7" name="firewall108" comment="vlan interface, static address, rc.conf format" ro="False">
@@ -23409,7 +23409,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -23452,13 +23452,13 @@
         </Management>
         <FirewallOptions>
           <Option name="accept_new_tcp_with_no_syn">False</Option>
-          <Option name="activationCmd"/>
+          <Option name="activationCmd"></Option>
           <Option name="admUser">root</Option>
-          <Option name="altAddress"/>
+          <Option name="altAddress"></Option>
           <Option name="check_shading">True</Option>
           <Option name="cmdline">-xt</Option>
-          <Option name="compiler"/>
-          <Option name="conf1_file"/>
+          <Option name="compiler"></Option>
+          <Option name="conf1_file"></Option>
           <Option name="conf_file_name_on_firewall">/etc/fw/path with space/pf.conf</Option>
           <Option name="configure_bridge_interfaces">True</Option>
           <Option name="configure_carp_interfaces">True</Option>
@@ -23466,7 +23466,7 @@
           <Option name="configure_pfsync_interfaces">True</Option>
           <Option name="configure_vlan_interfaces">True</Option>
           <Option name="debug">False</Option>
-          <Option name="epilog_script"/>
+          <Option name="epilog_script"></Option>
           <Option name="fallback_log">False</Option>
           <Option name="firewall_dir">/etc</Option>
           <Option name="freebsd_ip_forward">1</Option>
@@ -23481,7 +23481,7 @@
           <Option name="mgmt_addr">10.3.14.30</Option>
           <Option name="mgmt_ssh">True</Option>
           <Option name="openbsd_ip_forward">1</Option>
-          <Option name="output_file"/>
+          <Option name="output_file"></Option>
           <Option name="pass_all_out">false</Option>
           <Option name="pf_adaptive_end">0</Option>
           <Option name="pf_adaptive_start">0</Option>
@@ -23502,7 +23502,7 @@
           <Option name="pf_limit_table_entries">0</Option>
           <Option name="pf_limit_tables">0</Option>
           <Option name="pf_modulate_state">False</Option>
-          <Option name="pf_optimization"/>
+          <Option name="pf_optimization"></Option>
           <Option name="pf_other_first">0</Option>
           <Option name="pf_other_multiple">0</Option>
           <Option name="pf_other_single">0</Option>
@@ -23531,7 +23531,7 @@
           <Option name="pf_set_udp_first">False</Option>
           <Option name="pf_set_udp_multiple">False</Option>
           <Option name="pf_set_udp_single">True</Option>
-          <Option name="pf_state_policy"/>
+          <Option name="pf_state_policy"></Option>
           <Option name="pf_tcp_closed">0</Option>
           <Option name="pf_tcp_closing">0</Option>
           <Option name="pf_tcp_established">0</Option>
@@ -23544,10 +23544,10 @@
           <Option name="pf_udp_multiple">0</Option>
           <Option name="pf_udp_single">5</Option>
           <Option name="prolog_place">fw_file</Option>
-          <Option name="prolog_script"/>
-          <Option name="scpArgs"/>
+          <Option name="prolog_script"></Option>
+          <Option name="scpArgs"></Option>
           <Option name="script_name_on_firewall">/etc/fw/pf.fw</Option>
-          <Option name="sshArgs"/>
+          <Option name="sshArgs"></Option>
         </FirewallOptions>
       </Firewall>
       <Firewall id="id34464X3677" host_OS="openbsd" inactive="False" lastCompiled="1296525125" lastInstalled="1271995582" lastModified="1297198275" platform="pf" version="4.7" name="firewall103-1" comment="bridge interface, static address, shell script format, OpenBSD 4.7" ro="False">
@@ -23572,7 +23572,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -23614,13 +23614,13 @@
         </Management>
         <FirewallOptions>
           <Option name="accept_new_tcp_with_no_syn">False</Option>
-          <Option name="activationCmd"/>
+          <Option name="activationCmd"></Option>
           <Option name="admUser">root</Option>
-          <Option name="altAddress"/>
+          <Option name="altAddress"></Option>
           <Option name="check_shading">True</Option>
           <Option name="cmdline">-xt</Option>
-          <Option name="compiler"/>
-          <Option name="conf1_file"/>
+          <Option name="compiler"></Option>
+          <Option name="conf1_file"></Option>
           <Option name="conf_file_name_on_firewall">/etc/fw/path with space/pf.conf</Option>
           <Option name="configure_bridge_interfaces">True</Option>
           <Option name="configure_carp_interfaces">True</Option>
@@ -23628,7 +23628,7 @@
           <Option name="configure_pfsync_interfaces">True</Option>
           <Option name="configure_vlan_interfaces">True</Option>
           <Option name="debug">False</Option>
-          <Option name="epilog_script"/>
+          <Option name="epilog_script"></Option>
           <Option name="fallback_log">False</Option>
           <Option name="firewall_dir">/etc</Option>
           <Option name="freebsd_ip_forward">1</Option>
@@ -23643,7 +23643,7 @@
           <Option name="mgmt_addr">10.3.14.30</Option>
           <Option name="mgmt_ssh">True</Option>
           <Option name="openbsd_ip_forward">1</Option>
-          <Option name="output_file"/>
+          <Option name="output_file"></Option>
           <Option name="pass_all_out">false</Option>
           <Option name="pf_adaptive_end">0</Option>
           <Option name="pf_adaptive_start">0</Option>
@@ -23664,7 +23664,7 @@
           <Option name="pf_limit_table_entries">0</Option>
           <Option name="pf_limit_tables">0</Option>
           <Option name="pf_modulate_state">False</Option>
-          <Option name="pf_optimization"/>
+          <Option name="pf_optimization"></Option>
           <Option name="pf_other_first">0</Option>
           <Option name="pf_other_multiple">0</Option>
           <Option name="pf_other_single">0</Option>
@@ -23693,7 +23693,7 @@
           <Option name="pf_set_udp_first">False</Option>
           <Option name="pf_set_udp_multiple">False</Option>
           <Option name="pf_set_udp_single">True</Option>
-          <Option name="pf_state_policy"/>
+          <Option name="pf_state_policy"></Option>
           <Option name="pf_tcp_closed">0</Option>
           <Option name="pf_tcp_closing">0</Option>
           <Option name="pf_tcp_established">0</Option>
@@ -23706,10 +23706,10 @@
           <Option name="pf_udp_multiple">0</Option>
           <Option name="pf_udp_single">5</Option>
           <Option name="prolog_place">fw_file</Option>
-          <Option name="prolog_script"/>
-          <Option name="scpArgs"/>
+          <Option name="prolog_script"></Option>
+          <Option name="scpArgs"></Option>
           <Option name="script_name_on_firewall">/etc/fw/pf.fw</Option>
-          <Option name="sshArgs"/>
+          <Option name="sshArgs"></Option>
         </FirewallOptions>
       </Firewall>
       <Firewall id="id34541X3677" host_OS="openbsd" inactive="False" lastCompiled="1296525125" lastInstalled="1271995582" lastModified="1297198295" platform="pf" version="4.7" name="firewall104-1" comment="bridge interface, dynamic  address, shell script format, OpenBSD 4.7" ro="False">
@@ -23734,7 +23734,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -23774,13 +23774,13 @@
         </Management>
         <FirewallOptions>
           <Option name="accept_new_tcp_with_no_syn">False</Option>
-          <Option name="activationCmd"/>
+          <Option name="activationCmd"></Option>
           <Option name="admUser">root</Option>
-          <Option name="altAddress"/>
+          <Option name="altAddress"></Option>
           <Option name="check_shading">True</Option>
           <Option name="cmdline">-xt</Option>
-          <Option name="compiler"/>
-          <Option name="conf1_file"/>
+          <Option name="compiler"></Option>
+          <Option name="conf1_file"></Option>
           <Option name="conf_file_name_on_firewall">/etc/fw/path with space/pf.conf</Option>
           <Option name="configure_bridge_interfaces">True</Option>
           <Option name="configure_carp_interfaces">True</Option>
@@ -23788,7 +23788,7 @@
           <Option name="configure_pfsync_interfaces">True</Option>
           <Option name="configure_vlan_interfaces">True</Option>
           <Option name="debug">False</Option>
-          <Option name="epilog_script"/>
+          <Option name="epilog_script"></Option>
           <Option name="fallback_log">False</Option>
           <Option name="firewall_dir">/etc</Option>
           <Option name="freebsd_ip_forward">1</Option>
@@ -23803,7 +23803,7 @@
           <Option name="mgmt_addr">10.3.14.30</Option>
           <Option name="mgmt_ssh">True</Option>
           <Option name="openbsd_ip_forward">1</Option>
-          <Option name="output_file"/>
+          <Option name="output_file"></Option>
           <Option name="pass_all_out">false</Option>
           <Option name="pf_adaptive_end">0</Option>
           <Option name="pf_adaptive_start">0</Option>
@@ -23824,7 +23824,7 @@
           <Option name="pf_limit_table_entries">0</Option>
           <Option name="pf_limit_tables">0</Option>
           <Option name="pf_modulate_state">False</Option>
-          <Option name="pf_optimization"/>
+          <Option name="pf_optimization"></Option>
           <Option name="pf_other_first">0</Option>
           <Option name="pf_other_multiple">0</Option>
           <Option name="pf_other_single">0</Option>
@@ -23853,7 +23853,7 @@
           <Option name="pf_set_udp_first">False</Option>
           <Option name="pf_set_udp_multiple">False</Option>
           <Option name="pf_set_udp_single">True</Option>
-          <Option name="pf_state_policy"/>
+          <Option name="pf_state_policy"></Option>
           <Option name="pf_tcp_closed">0</Option>
           <Option name="pf_tcp_closing">0</Option>
           <Option name="pf_tcp_established">0</Option>
@@ -23866,10 +23866,10 @@
           <Option name="pf_udp_multiple">0</Option>
           <Option name="pf_udp_single">5</Option>
           <Option name="prolog_place">fw_file</Option>
-          <Option name="prolog_script"/>
-          <Option name="scpArgs"/>
+          <Option name="prolog_script"></Option>
+          <Option name="scpArgs"></Option>
           <Option name="script_name_on_firewall">/etc/fw/pf.fw</Option>
-          <Option name="sshArgs"/>
+          <Option name="sshArgs"></Option>
         </FirewallOptions>
       </Firewall>
       <Firewall id="id34670X3677" host_OS="openbsd" inactive="False" lastCompiled="1296525125" lastInstalled="1271995582" lastModified="1297198283" platform="pf" version="4.0" name="firewall103-2" comment="bridge interface, static address, shell script format, OpenBSD &lt;4.7" ro="False">
@@ -23894,7 +23894,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -23935,13 +23935,13 @@
         </Management>
         <FirewallOptions>
           <Option name="accept_new_tcp_with_no_syn">False</Option>
-          <Option name="activationCmd"/>
+          <Option name="activationCmd"></Option>
           <Option name="admUser">root</Option>
-          <Option name="altAddress"/>
+          <Option name="altAddress"></Option>
           <Option name="check_shading">True</Option>
           <Option name="cmdline">-xt</Option>
-          <Option name="compiler"/>
-          <Option name="conf1_file"/>
+          <Option name="compiler"></Option>
+          <Option name="conf1_file"></Option>
           <Option name="conf_file_name_on_firewall">/etc/fw/path with space/pf.conf</Option>
           <Option name="configure_bridge_interfaces">True</Option>
           <Option name="configure_carp_interfaces">True</Option>
@@ -23949,7 +23949,7 @@
           <Option name="configure_pfsync_interfaces">True</Option>
           <Option name="configure_vlan_interfaces">True</Option>
           <Option name="debug">False</Option>
-          <Option name="epilog_script"/>
+          <Option name="epilog_script"></Option>
           <Option name="fallback_log">False</Option>
           <Option name="firewall_dir">/etc</Option>
           <Option name="freebsd_ip_forward">1</Option>
@@ -23964,7 +23964,7 @@
           <Option name="mgmt_addr">10.3.14.30</Option>
           <Option name="mgmt_ssh">True</Option>
           <Option name="openbsd_ip_forward">1</Option>
-          <Option name="output_file"/>
+          <Option name="output_file"></Option>
           <Option name="pass_all_out">false</Option>
           <Option name="pf_adaptive_end">0</Option>
           <Option name="pf_adaptive_start">0</Option>
@@ -23985,7 +23985,7 @@
           <Option name="pf_limit_table_entries">0</Option>
           <Option name="pf_limit_tables">0</Option>
           <Option name="pf_modulate_state">False</Option>
-          <Option name="pf_optimization"/>
+          <Option name="pf_optimization"></Option>
           <Option name="pf_other_first">0</Option>
           <Option name="pf_other_multiple">0</Option>
           <Option name="pf_other_single">0</Option>
@@ -24014,7 +24014,7 @@
           <Option name="pf_set_udp_first">False</Option>
           <Option name="pf_set_udp_multiple">False</Option>
           <Option name="pf_set_udp_single">True</Option>
-          <Option name="pf_state_policy"/>
+          <Option name="pf_state_policy"></Option>
           <Option name="pf_tcp_closed">0</Option>
           <Option name="pf_tcp_closing">0</Option>
           <Option name="pf_tcp_established">0</Option>
@@ -24027,10 +24027,10 @@
           <Option name="pf_udp_multiple">0</Option>
           <Option name="pf_udp_single">5</Option>
           <Option name="prolog_place">fw_file</Option>
-          <Option name="prolog_script"/>
-          <Option name="scpArgs"/>
+          <Option name="prolog_script"></Option>
+          <Option name="scpArgs"></Option>
           <Option name="script_name_on_firewall">/etc/fw/pf.fw</Option>
-          <Option name="sshArgs"/>
+          <Option name="sshArgs"></Option>
         </FirewallOptions>
       </Firewall>
       <Firewall id="id164588X20402" host_OS="freebsd" inactive="False" lastCompiled="1297645524" lastInstalled="0" lastModified="1305062829" platform="pf" version="" name="firewall110" comment="testing shadowing of rules with tag action" ro="False">
@@ -24055,31 +24055,31 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
+              <Option name="action_on_reject"></Option>
               <Option name="classification">False</Option>
-              <Option name="classify_str"/>
+              <Option name="classify_str"></Option>
               <Option name="color">#C0BA44</Option>
-              <Option name="custom_str"/>
-              <Option name="ipf_route_opt_addr"/>
-              <Option name="ipf_route_opt_if"/>
+              <Option name="custom_str"></Option>
+              <Option name="ipf_route_opt_addr"></Option>
+              <Option name="ipf_route_opt_if"></Option>
               <Option name="ipf_route_option">route_reply_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"/>
-              <Option name="ipt_iif"/>
+              <Option name="ipt_gw"></Option>
+              <Option name="ipt_iif"></Option>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"/>
+              <Option name="ipt_oif"></Option>
               <Option name="ipt_tee">False</Option>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_keep_state">False</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">0</Option>
@@ -24088,15 +24088,15 @@
               <Option name="pf_no_sync">False</Option>
               <Option name="pf_pflow">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"/>
-              <Option name="pf_route_opt_if"/>
+              <Option name="pf_route_opt_addr"></Option>
+              <Option name="pf_route_opt_if"></Option>
               <Option name="pf_route_option">none</Option>
               <Option name="pf_rule_max_state">0</Option>
               <Option name="pf_sloppy_tracker">False</Option>
               <Option name="pf_source_tracking">False</Option>
               <Option name="pf_synproxy">False</Option>
               <Option name="routing">False</Option>
-              <Option name="rule_name_accounting"/>
+              <Option name="rule_name_accounting"></Option>
               <Option name="stateless">True</Option>
               <Option name="tagging">True</Option>
               <Option name="tagobject_id">id1391120443</Option>
@@ -24119,31 +24119,31 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
+              <Option name="action_on_reject"></Option>
               <Option name="classification">True</Option>
               <Option name="classify_str">ssh_q</Option>
               <Option name="color">#C0BA44</Option>
-              <Option name="custom_str"/>
-              <Option name="ipf_route_opt_addr"/>
-              <Option name="ipf_route_opt_if"/>
+              <Option name="custom_str"></Option>
+              <Option name="ipf_route_opt_addr"></Option>
+              <Option name="ipf_route_opt_if"></Option>
               <Option name="ipf_route_option">route_reply_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"/>
-              <Option name="ipt_iif"/>
+              <Option name="ipt_gw"></Option>
+              <Option name="ipt_iif"></Option>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"/>
+              <Option name="ipt_oif"></Option>
               <Option name="ipt_tee">False</Option>
-              <Option name="log_prefix"/>
+              <Option name="log_prefix"></Option>
               <Option name="pf_classify_str">ssh_q</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_keep_state">False</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">0</Option>
@@ -24152,15 +24152,15 @@
               <Option name="pf_no_sync">False</Option>
               <Option name="pf_pflow">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"/>
-              <Option name="pf_route_opt_if"/>
+              <Option name="pf_route_opt_addr"></Option>
+              <Option name="pf_route_opt_if"></Option>
               <Option name="pf_route_option">none</Option>
               <Option name="pf_rule_max_state">0</Option>
               <Option name="pf_sloppy_tracker">False</Option>
               <Option name="pf_source_tracking">False</Option>
               <Option name="pf_synproxy">False</Option>
               <Option name="routing">False</Option>
-              <Option name="rule_name_accounting"/>
+              <Option name="rule_name_accounting"></Option>
               <Option name="stateless">False</Option>
               <Option name="tagging">False</Option>
             </PolicyRuleOptions>
@@ -24182,15 +24182,15 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
+              <Option name="action_on_reject"></Option>
               <Option name="classification">False</Option>
-              <Option name="classify_str"/>
-              <Option name="custom_str"/>
+              <Option name="classify_str"></Option>
+              <Option name="custom_str"></Option>
               <Option name="ipfw_pipe_method">0</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="routing">False</Option>
-              <Option name="rule_name_accounting"/>
+              <Option name="rule_name_accounting"></Option>
               <Option name="tagging">True</Option>
               <Option name="tagobject_id">id43F4556A28869</Option>
             </PolicyRuleOptions>
@@ -24224,15 +24224,15 @@
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
           <Option name="action_on_reject">ICMP net unreachable</Option>
-          <Option name="activationCmd"/>
-          <Option name="admUser"/>
-          <Option name="altAddress"/>
+          <Option name="activationCmd"></Option>
+          <Option name="admUser"></Option>
+          <Option name="altAddress"></Option>
           <Option name="check_shading">True</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
-          <Option name="cmdline"/>
-          <Option name="compiler"/>
-          <Option name="conf1_file"/>
-          <Option name="conf_file_name_on_firewall"/>
+          <Option name="cmdline"></Option>
+          <Option name="compiler"></Option>
+          <Option name="conf1_file"></Option>
+          <Option name="conf_file_name_on_firewall"></Option>
           <Option name="configure_bridge_interfaces">False</Option>
           <Option name="configure_carp_interfaces">False</Option>
           <Option name="configure_interfaces">False</Option>
@@ -24240,21 +24240,21 @@
           <Option name="configure_vlan_interfaces">False</Option>
           <Option name="debug">False</Option>
           <Option name="dyn_addr">False</Option>
-          <Option name="epilog_script"/>
+          <Option name="epilog_script"></Option>
           <Option name="fallback_log">False</Option>
-          <Option name="firewall_dir"/>
+          <Option name="firewall_dir"></Option>
           <Option name="firewall_is_part_of_any">True</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
-          <Option name="freebsd_path_ipf"/>
-          <Option name="freebsd_path_ipnat"/>
-          <Option name="freebsd_path_sysctl"/>
+          <Option name="freebsd_path_ipf"></Option>
+          <Option name="freebsd_path_ipnat"></Option>
+          <Option name="freebsd_path_sysctl"></Option>
           <Option name="generate_rc_conf_file">False</Option>
           <Option name="generate_shell_script">True</Option>
           <Option name="ignore_empty_groups">False</Option>
           <Option name="in_out_code">True</Option>
-          <Option name="inst_cmdline"/>
-          <Option name="inst_script"/>
-          <Option name="install_script"/>
+          <Option name="inst_cmdline"></Option>
+          <Option name="inst_script"></Option>
+          <Option name="install_script"></Option>
           <Option name="ipv4_6_order">ipv4_first</Option>
           <Option name="limit_suffix">/day</Option>
           <Option name="limit_value">0</Option>
@@ -24267,18 +24267,18 @@
           <Option name="log_level">debug</Option>
           <Option name="log_limit_suffix">/second</Option>
           <Option name="log_limit_value">0</Option>
-          <Option name="log_prefix"/>
+          <Option name="log_prefix"></Option>
           <Option name="log_tcp_opt">False</Option>
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"/>
+          <Option name="mgmt_addr"></Option>
           <Option name="mgmt_ssh">False</Option>
           <Option name="modulate_state">False</Option>
           <Option name="no_iochains_for_any">False</Option>
           <Option name="no_optimisation">False</Option>
-          <Option name="openbsd_path_pfctl"/>
-          <Option name="openbsd_path_sysctl"/>
-          <Option name="output_file"/>
+          <Option name="openbsd_path_pfctl"></Option>
+          <Option name="openbsd_path_sysctl"></Option>
+          <Option name="output_file"></Option>
           <Option name="pass_all_out">False</Option>
           <Option name="pf_adaptive_end">0</Option>
           <Option name="pf_adaptive_start">0</Option>
@@ -24299,7 +24299,7 @@
           <Option name="pf_limit_table_entries">0</Option>
           <Option name="pf_limit_tables">0</Option>
           <Option name="pf_modulate_state">False</Option>
-          <Option name="pf_optimization"/>
+          <Option name="pf_optimization"></Option>
           <Option name="pf_other_first">0</Option>
           <Option name="pf_other_multiple">0</Option>
           <Option name="pf_other_single">0</Option>
@@ -24328,7 +24328,7 @@
           <Option name="pf_set_udp_first">False</Option>
           <Option name="pf_set_udp_multiple">False</Option>
           <Option name="pf_set_udp_single">False</Option>
-          <Option name="pf_state_policy"/>
+          <Option name="pf_state_policy"></Option>
           <Option name="pf_tcp_closed">0</Option>
           <Option name="pf_tcp_closing">0</Option>
           <Option name="pf_tcp_established">0</Option>
@@ -24342,15 +24342,15 @@
           <Option name="pf_udp_single">0</Option>
           <Option name="platform">iptables</Option>
           <Option name="prolog_place">fw_file</Option>
-          <Option name="prolog_script"/>
+          <Option name="prolog_script"></Option>
           <Option name="proxy_arp">False</Option>
-          <Option name="scpArgs"/>
-          <Option name="script_env_path"/>
-          <Option name="script_name_on_firewall"/>
-          <Option name="snmp_contact"/>
-          <Option name="snmp_description"/>
-          <Option name="snmp_location"/>
-          <Option name="sshArgs"/>
+          <Option name="scpArgs"></Option>
+          <Option name="script_env_path"></Option>
+          <Option name="script_name_on_firewall"></Option>
+          <Option name="snmp_contact"></Option>
+          <Option name="snmp_description"></Option>
+          <Option name="snmp_location"></Option>
+          <Option name="sshArgs"></Option>
           <Option name="use_ip_tool">False</Option>
           <Option name="use_numeric_log_levels">False</Option>
           <Option name="use_tables">True</Option>
@@ -24378,7 +24378,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -24418,7 +24418,7 @@
               <Option name="enable_stp">False</Option>
               <Option name="iface_configure_mtu">False</Option>
               <Option name="iface_mtu">1500</Option>
-              <Option name="iface_options"/>
+              <Option name="iface_options"></Option>
               <Option name="type">8021q</Option>
               <Option name="vlan_id">101</Option>
             </InterfaceOptions>
@@ -24429,7 +24429,7 @@
               <Option name="enable_stp">False</Option>
               <Option name="iface_configure_mtu">False</Option>
               <Option name="iface_mtu">1500</Option>
-              <Option name="iface_options"/>
+              <Option name="iface_options"></Option>
               <Option name="type">8021q</Option>
               <Option name="vlan_id">102</Option>
             </InterfaceOptions>
@@ -24441,7 +24441,7 @@
             <Option name="enable_stp">False</Option>
             <Option name="iface_configure_mtu">False</Option>
             <Option name="iface_mtu">1500</Option>
-            <Option name="iface_options"/>
+            <Option name="iface_options"></Option>
             <Option name="type">bridge</Option>
             <Option name="vlan_id">0</Option>
           </InterfaceOptions>
@@ -24450,7 +24450,7 @@
               <Option name="enable_stp">False</Option>
               <Option name="iface_configure_mtu">False</Option>
               <Option name="iface_mtu">1500</Option>
-              <Option name="iface_options"/>
+              <Option name="iface_options"></Option>
               <Option name="type">ethernet</Option>
               <Option name="vlan_id">0</Option>
             </InterfaceOptions>
@@ -24460,7 +24460,7 @@
               <Option name="enable_stp">False</Option>
               <Option name="iface_configure_mtu">False</Option>
               <Option name="iface_mtu">1500</Option>
-              <Option name="iface_options"/>
+              <Option name="iface_options"></Option>
               <Option name="type">ethernet</Option>
               <Option name="vlan_id">0</Option>
             </InterfaceOptions>
@@ -24473,13 +24473,13 @@
         </Management>
         <FirewallOptions>
           <Option name="accept_new_tcp_with_no_syn">False</Option>
-          <Option name="activationCmd"/>
+          <Option name="activationCmd"></Option>
           <Option name="admUser">root</Option>
-          <Option name="altAddress"/>
+          <Option name="altAddress"></Option>
           <Option name="check_shading">True</Option>
           <Option name="cmdline">-xt</Option>
-          <Option name="compiler"/>
-          <Option name="conf1_file"/>
+          <Option name="compiler"></Option>
+          <Option name="conf1_file"></Option>
           <Option name="conf_file_name_on_firewall">/etc/fw/path with space/pf.conf</Option>
           <Option name="configure_bridge_interfaces">True</Option>
           <Option name="configure_carp_interfaces">True</Option>
@@ -24487,7 +24487,7 @@
           <Option name="configure_pfsync_interfaces">True</Option>
           <Option name="configure_vlan_interfaces">True</Option>
           <Option name="debug">False</Option>
-          <Option name="epilog_script"/>
+          <Option name="epilog_script"></Option>
           <Option name="fallback_log">False</Option>
           <Option name="firewall_dir">/etc</Option>
           <Option name="freebsd_ip_forward">1</Option>
@@ -24502,11 +24502,11 @@
           <Option name="mgmt_addr">10.3.14.30</Option>
           <Option name="mgmt_ssh">True</Option>
           <Option name="openbsd_ip_forward">1</Option>
-          <Option name="output_file"/>
+          <Option name="output_file"></Option>
           <Option name="pass_all_out">false</Option>
           <Option name="pf_adaptive_end">0</Option>
           <Option name="pf_adaptive_start">0</Option>
-          <Option name="pf_block_policy"/>
+          <Option name="pf_block_policy"></Option>
           <Option name="pf_do_limit_frags">False</Option>
           <Option name="pf_do_limit_src_nodes">False</Option>
           <Option name="pf_do_limit_states">False</Option>
@@ -24524,7 +24524,7 @@
           <Option name="pf_limit_table_entries">0</Option>
           <Option name="pf_limit_tables">0</Option>
           <Option name="pf_modulate_state">False</Option>
-          <Option name="pf_optimization"/>
+          <Option name="pf_optimization"></Option>
           <Option name="pf_other_first">0</Option>
           <Option name="pf_other_multiple">0</Option>
           <Option name="pf_other_single">0</Option>
@@ -24539,7 +24539,7 @@
           <Option name="pf_scrub_use_maxmss">True</Option>
           <Option name="pf_scrub_use_minttl">True</Option>
           <Option name="pf_set_adaptive">False</Option>
-          <Option name="pf_set_debug"/>
+          <Option name="pf_set_debug"></Option>
           <Option name="pf_set_icmp_error">False</Option>
           <Option name="pf_set_icmp_first">False</Option>
           <Option name="pf_set_other_first">False</Option>
@@ -24554,7 +24554,7 @@
           <Option name="pf_set_udp_first">False</Option>
           <Option name="pf_set_udp_multiple">False</Option>
           <Option name="pf_set_udp_single">True</Option>
-          <Option name="pf_state_policy"/>
+          <Option name="pf_state_policy"></Option>
           <Option name="pf_tcp_closed">0</Option>
           <Option name="pf_tcp_closing">0</Option>
           <Option name="pf_tcp_established">0</Option>
@@ -24567,10 +24567,10 @@
           <Option name="pf_udp_multiple">0</Option>
           <Option name="pf_udp_single">5</Option>
           <Option name="prolog_place">fw_file</Option>
-          <Option name="prolog_script"/>
-          <Option name="scpArgs"/>
+          <Option name="prolog_script"></Option>
+          <Option name="scpArgs"></Option>
           <Option name="script_name_on_firewall">/etc/fw/pf.fw</Option>
-          <Option name="sshArgs"/>
+          <Option name="sshArgs"></Option>
         </FirewallOptions>
       </Firewall>
       <Firewall id="id35385X5600" host_OS="freebsd" inactive="False" lastCompiled="1297728261" lastInstalled="1271995582" lastModified="1297901993" platform="pf" version="4.7" name="firewall109-1" comment="complex configuration with bridge and vlan, rc.conf format" ro="False">
@@ -24595,7 +24595,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -24635,7 +24635,7 @@
               <Option name="enable_stp">False</Option>
               <Option name="iface_configure_mtu">False</Option>
               <Option name="iface_mtu">1500</Option>
-              <Option name="iface_options"/>
+              <Option name="iface_options"></Option>
               <Option name="type">8021q</Option>
               <Option name="vlan_id">101</Option>
             </InterfaceOptions>
@@ -24646,7 +24646,7 @@
               <Option name="enable_stp">False</Option>
               <Option name="iface_configure_mtu">False</Option>
               <Option name="iface_mtu">1500</Option>
-              <Option name="iface_options"/>
+              <Option name="iface_options"></Option>
               <Option name="type">8021q</Option>
               <Option name="vlan_id">102</Option>
             </InterfaceOptions>
@@ -24658,7 +24658,7 @@
             <Option name="enable_stp">False</Option>
             <Option name="iface_configure_mtu">False</Option>
             <Option name="iface_mtu">1500</Option>
-            <Option name="iface_options"/>
+            <Option name="iface_options"></Option>
             <Option name="type">bridge</Option>
             <Option name="vlan_id">0</Option>
           </InterfaceOptions>
@@ -24667,7 +24667,7 @@
               <Option name="enable_stp">False</Option>
               <Option name="iface_configure_mtu">False</Option>
               <Option name="iface_mtu">1500</Option>
-              <Option name="iface_options"/>
+              <Option name="iface_options"></Option>
               <Option name="type">ethernet</Option>
               <Option name="vlan_id">0</Option>
             </InterfaceOptions>
@@ -24677,7 +24677,7 @@
               <Option name="enable_stp">False</Option>
               <Option name="iface_configure_mtu">False</Option>
               <Option name="iface_mtu">1500</Option>
-              <Option name="iface_options"/>
+              <Option name="iface_options"></Option>
               <Option name="type">ethernet</Option>
               <Option name="vlan_id">0</Option>
             </InterfaceOptions>
@@ -24690,13 +24690,13 @@
         </Management>
         <FirewallOptions>
           <Option name="accept_new_tcp_with_no_syn">False</Option>
-          <Option name="activationCmd"/>
+          <Option name="activationCmd"></Option>
           <Option name="admUser">root</Option>
-          <Option name="altAddress"/>
+          <Option name="altAddress"></Option>
           <Option name="check_shading">True</Option>
           <Option name="cmdline">-xt</Option>
-          <Option name="compiler"/>
-          <Option name="conf1_file"/>
+          <Option name="compiler"></Option>
+          <Option name="conf1_file"></Option>
           <Option name="conf_file_name_on_firewall">/etc/fw/path with space/pf.conf</Option>
           <Option name="configure_bridge_interfaces">True</Option>
           <Option name="configure_carp_interfaces">True</Option>
@@ -24704,7 +24704,7 @@
           <Option name="configure_pfsync_interfaces">True</Option>
           <Option name="configure_vlan_interfaces">True</Option>
           <Option name="debug">False</Option>
-          <Option name="epilog_script"/>
+          <Option name="epilog_script"></Option>
           <Option name="fallback_log">False</Option>
           <Option name="firewall_dir">/etc</Option>
           <Option name="freebsd_ip_forward">1</Option>
@@ -24719,7 +24719,7 @@
           <Option name="mgmt_addr">10.3.14.30</Option>
           <Option name="mgmt_ssh">True</Option>
           <Option name="openbsd_ip_forward">1</Option>
-          <Option name="output_file"/>
+          <Option name="output_file"></Option>
           <Option name="pass_all_out">false</Option>
           <Option name="pf_adaptive_end">0</Option>
           <Option name="pf_adaptive_start">0</Option>
@@ -24740,7 +24740,7 @@
           <Option name="pf_limit_table_entries">0</Option>
           <Option name="pf_limit_tables">0</Option>
           <Option name="pf_modulate_state">False</Option>
-          <Option name="pf_optimization"/>
+          <Option name="pf_optimization"></Option>
           <Option name="pf_other_first">0</Option>
           <Option name="pf_other_multiple">0</Option>
           <Option name="pf_other_single">0</Option>
@@ -24769,7 +24769,7 @@
           <Option name="pf_set_udp_first">False</Option>
           <Option name="pf_set_udp_multiple">False</Option>
           <Option name="pf_set_udp_single">True</Option>
-          <Option name="pf_state_policy"/>
+          <Option name="pf_state_policy"></Option>
           <Option name="pf_tcp_closed">0</Option>
           <Option name="pf_tcp_closing">0</Option>
           <Option name="pf_tcp_established">0</Option>
@@ -24782,10 +24782,10 @@
           <Option name="pf_udp_multiple">0</Option>
           <Option name="pf_udp_single">5</Option>
           <Option name="prolog_place">fw_file</Option>
-          <Option name="prolog_script"/>
-          <Option name="scpArgs"/>
+          <Option name="prolog_script"></Option>
+          <Option name="scpArgs"></Option>
           <Option name="script_name_on_firewall">/etc/fw/pf.fw</Option>
-          <Option name="sshArgs"/>
+          <Option name="sshArgs"></Option>
         </FirewallOptions>
       </Firewall>
       <Firewall id="id35513X5911" host_OS="freebsd" inactive="False" lastCompiled="1297894219" lastInstalled="1271995582" lastModified="1297891411" platform="pf" version="4.7" name="firewall109-2" comment="complex configuration with bridge and vlan, uses vlan interfaces with names not matching vlan IDs&#10;" ro="False">
@@ -24810,7 +24810,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -24830,7 +24830,7 @@
               <Option name="enable_stp">False</Option>
               <Option name="iface_configure_mtu">False</Option>
               <Option name="iface_mtu">1500</Option>
-              <Option name="iface_options"/>
+              <Option name="iface_options"></Option>
               <Option name="type">8021q</Option>
               <Option name="vlan_id">210</Option>
             </InterfaceOptions>
@@ -24845,7 +24845,7 @@
               <Option name="enable_stp">False</Option>
               <Option name="iface_configure_mtu">False</Option>
               <Option name="iface_mtu">1500</Option>
-              <Option name="iface_options"/>
+              <Option name="iface_options"></Option>
               <Option name="type">8021q</Option>
               <Option name="vlan_id">210</Option>
             </InterfaceOptions>
@@ -24857,7 +24857,7 @@
             <Option name="enable_stp">False</Option>
             <Option name="iface_configure_mtu">False</Option>
             <Option name="iface_mtu">1500</Option>
-            <Option name="iface_options"/>
+            <Option name="iface_options"></Option>
             <Option name="type">bridge</Option>
             <Option name="vlan_id">0</Option>
           </InterfaceOptions>
@@ -24871,7 +24871,7 @@
               <Option name="enable_stp">False</Option>
               <Option name="iface_configure_mtu">False</Option>
               <Option name="iface_mtu">1500</Option>
-              <Option name="iface_options"/>
+              <Option name="iface_options"></Option>
               <Option name="type">ethernet</Option>
               <Option name="vlan_id">0</Option>
             </InterfaceOptions>
@@ -24884,13 +24884,13 @@
         </Management>
         <FirewallOptions>
           <Option name="accept_new_tcp_with_no_syn">False</Option>
-          <Option name="activationCmd"/>
+          <Option name="activationCmd"></Option>
           <Option name="admUser">root</Option>
-          <Option name="altAddress"/>
+          <Option name="altAddress"></Option>
           <Option name="check_shading">True</Option>
           <Option name="cmdline">-xt</Option>
-          <Option name="compiler"/>
-          <Option name="conf1_file"/>
+          <Option name="compiler"></Option>
+          <Option name="conf1_file"></Option>
           <Option name="conf_file_name_on_firewall">/etc/fw/path with space/pf.conf</Option>
           <Option name="configure_bridge_interfaces">True</Option>
           <Option name="configure_carp_interfaces">True</Option>
@@ -24898,7 +24898,7 @@
           <Option name="configure_pfsync_interfaces">True</Option>
           <Option name="configure_vlan_interfaces">True</Option>
           <Option name="debug">False</Option>
-          <Option name="epilog_script"/>
+          <Option name="epilog_script"></Option>
           <Option name="fallback_log">False</Option>
           <Option name="firewall_dir">/etc</Option>
           <Option name="freebsd_ip_forward">1</Option>
@@ -24913,11 +24913,11 @@
           <Option name="mgmt_addr">10.3.14.30</Option>
           <Option name="mgmt_ssh">True</Option>
           <Option name="openbsd_ip_forward">1</Option>
-          <Option name="output_file"/>
+          <Option name="output_file"></Option>
           <Option name="pass_all_out">false</Option>
           <Option name="pf_adaptive_end">0</Option>
           <Option name="pf_adaptive_start">0</Option>
-          <Option name="pf_block_policy"/>
+          <Option name="pf_block_policy"></Option>
           <Option name="pf_do_limit_frags">False</Option>
           <Option name="pf_do_limit_src_nodes">False</Option>
           <Option name="pf_do_limit_states">False</Option>
@@ -24935,7 +24935,7 @@
           <Option name="pf_limit_table_entries">0</Option>
           <Option name="pf_limit_tables">0</Option>
           <Option name="pf_modulate_state">False</Option>
-          <Option name="pf_optimization"/>
+          <Option name="pf_optimization"></Option>
           <Option name="pf_other_first">0</Option>
           <Option name="pf_other_multiple">0</Option>
           <Option name="pf_other_single">0</Option>
@@ -24950,7 +24950,7 @@
           <Option name="pf_scrub_use_maxmss">True</Option>
           <Option name="pf_scrub_use_minttl">True</Option>
           <Option name="pf_set_adaptive">False</Option>
-          <Option name="pf_set_debug"/>
+          <Option name="pf_set_debug"></Option>
           <Option name="pf_set_icmp_error">False</Option>
           <Option name="pf_set_icmp_first">False</Option>
           <Option name="pf_set_other_first">False</Option>
@@ -24965,7 +24965,7 @@
           <Option name="pf_set_udp_first">False</Option>
           <Option name="pf_set_udp_multiple">False</Option>
           <Option name="pf_set_udp_single">True</Option>
-          <Option name="pf_state_policy"/>
+          <Option name="pf_state_policy"></Option>
           <Option name="pf_tcp_closed">0</Option>
           <Option name="pf_tcp_closing">0</Option>
           <Option name="pf_tcp_established">0</Option>
@@ -24978,10 +24978,10 @@
           <Option name="pf_udp_multiple">0</Option>
           <Option name="pf_udp_single">5</Option>
           <Option name="prolog_place">fw_file</Option>
-          <Option name="prolog_script"/>
-          <Option name="scpArgs"/>
+          <Option name="prolog_script"></Option>
+          <Option name="scpArgs"></Option>
           <Option name="script_name_on_firewall">/etc/fw/pf.fw</Option>
-          <Option name="sshArgs"/>
+          <Option name="sshArgs"></Option>
         </FirewallOptions>
       </Firewall>
       <Firewall id="id35714X5911" host_OS="freebsd" inactive="False" lastCompiled="1297891451" lastInstalled="1271995582" lastModified="1297891442" platform="pf" version="4.7" name="firewall109-3" comment="complex configuration with bridge and vlan, uses vlan interfaces with names not matching vlan IDs. rc.conf format&#10;&#10;" ro="False">
@@ -25006,7 +25006,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -25026,7 +25026,7 @@
               <Option name="enable_stp">False</Option>
               <Option name="iface_configure_mtu">False</Option>
               <Option name="iface_mtu">1500</Option>
-              <Option name="iface_options"/>
+              <Option name="iface_options"></Option>
               <Option name="type">8021q</Option>
               <Option name="vlan_id">210</Option>
             </InterfaceOptions>
@@ -25041,7 +25041,7 @@
               <Option name="enable_stp">False</Option>
               <Option name="iface_configure_mtu">False</Option>
               <Option name="iface_mtu">1500</Option>
-              <Option name="iface_options"/>
+              <Option name="iface_options"></Option>
               <Option name="type">8021q</Option>
               <Option name="vlan_id">210</Option>
             </InterfaceOptions>
@@ -25053,7 +25053,7 @@
             <Option name="enable_stp">False</Option>
             <Option name="iface_configure_mtu">False</Option>
             <Option name="iface_mtu">1500</Option>
-            <Option name="iface_options"/>
+            <Option name="iface_options"></Option>
             <Option name="type">bridge</Option>
             <Option name="vlan_id">0</Option>
           </InterfaceOptions>
@@ -25067,7 +25067,7 @@
               <Option name="enable_stp">False</Option>
               <Option name="iface_configure_mtu">False</Option>
               <Option name="iface_mtu">1500</Option>
-              <Option name="iface_options"/>
+              <Option name="iface_options"></Option>
               <Option name="type">ethernet</Option>
               <Option name="vlan_id">0</Option>
             </InterfaceOptions>
@@ -25080,13 +25080,13 @@
         </Management>
         <FirewallOptions>
           <Option name="accept_new_tcp_with_no_syn">False</Option>
-          <Option name="activationCmd"/>
+          <Option name="activationCmd"></Option>
           <Option name="admUser">root</Option>
-          <Option name="altAddress"/>
+          <Option name="altAddress"></Option>
           <Option name="check_shading">True</Option>
           <Option name="cmdline">-xt</Option>
-          <Option name="compiler"/>
-          <Option name="conf1_file"/>
+          <Option name="compiler"></Option>
+          <Option name="conf1_file"></Option>
           <Option name="conf_file_name_on_firewall">/etc/fw/path with space/pf.conf</Option>
           <Option name="configure_bridge_interfaces">True</Option>
           <Option name="configure_carp_interfaces">True</Option>
@@ -25094,7 +25094,7 @@
           <Option name="configure_pfsync_interfaces">True</Option>
           <Option name="configure_vlan_interfaces">True</Option>
           <Option name="debug">False</Option>
-          <Option name="epilog_script"/>
+          <Option name="epilog_script"></Option>
           <Option name="fallback_log">False</Option>
           <Option name="firewall_dir">/etc</Option>
           <Option name="freebsd_ip_forward">1</Option>
@@ -25109,11 +25109,11 @@
           <Option name="mgmt_addr">10.3.14.30</Option>
           <Option name="mgmt_ssh">True</Option>
           <Option name="openbsd_ip_forward">1</Option>
-          <Option name="output_file"/>
+          <Option name="output_file"></Option>
           <Option name="pass_all_out">false</Option>
           <Option name="pf_adaptive_end">0</Option>
           <Option name="pf_adaptive_start">0</Option>
-          <Option name="pf_block_policy"/>
+          <Option name="pf_block_policy"></Option>
           <Option name="pf_do_limit_frags">False</Option>
           <Option name="pf_do_limit_src_nodes">False</Option>
           <Option name="pf_do_limit_states">False</Option>
@@ -25131,7 +25131,7 @@
           <Option name="pf_limit_table_entries">0</Option>
           <Option name="pf_limit_tables">0</Option>
           <Option name="pf_modulate_state">False</Option>
-          <Option name="pf_optimization"/>
+          <Option name="pf_optimization"></Option>
           <Option name="pf_other_first">0</Option>
           <Option name="pf_other_multiple">0</Option>
           <Option name="pf_other_single">0</Option>
@@ -25146,7 +25146,7 @@
           <Option name="pf_scrub_use_maxmss">True</Option>
           <Option name="pf_scrub_use_minttl">True</Option>
           <Option name="pf_set_adaptive">False</Option>
-          <Option name="pf_set_debug"/>
+          <Option name="pf_set_debug"></Option>
           <Option name="pf_set_icmp_error">False</Option>
           <Option name="pf_set_icmp_first">False</Option>
           <Option name="pf_set_other_first">False</Option>
@@ -25161,7 +25161,7 @@
           <Option name="pf_set_udp_first">False</Option>
           <Option name="pf_set_udp_multiple">False</Option>
           <Option name="pf_set_udp_single">True</Option>
-          <Option name="pf_state_policy"/>
+          <Option name="pf_state_policy"></Option>
           <Option name="pf_tcp_closed">0</Option>
           <Option name="pf_tcp_closing">0</Option>
           <Option name="pf_tcp_established">0</Option>
@@ -25174,10 +25174,10 @@
           <Option name="pf_udp_multiple">0</Option>
           <Option name="pf_udp_single">5</Option>
           <Option name="prolog_place">fw_file</Option>
-          <Option name="prolog_script"/>
-          <Option name="scpArgs"/>
+          <Option name="prolog_script"></Option>
+          <Option name="scpArgs"></Option>
           <Option name="script_name_on_firewall">/etc/fw/pf.fw</Option>
-          <Option name="sshArgs"/>
+          <Option name="sshArgs"></Option>
         </FirewallOptions>
       </Firewall>
       <Firewall id="id134556X19225" host_OS="freebsd" inactive="False" lastCompiled="1272404353" lastInstalled="1142003872" lastModified="1297994826" platform="pf" version="" name="firewall2-6" comment="tests for nat rules with inbound and outbound interfaces" ro="False">
@@ -25209,7 +25209,7 @@
             </ItfOutb>
             <NATRuleOptions>
               <Option name="color">#8BC065</Option>
-              <Option name="id"/>
+              <Option name="id"></Option>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id134661X19225" disabled="False" group="" position="1" action="Translate" comment="">
@@ -25239,7 +25239,7 @@
             </ItfOutb>
             <NATRuleOptions>
               <Option name="color">#8BC065</Option>
-              <Option name="id"/>
+              <Option name="id"></Option>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id134705X19225" disabled="False" group="" position="2" action="Translate" comment="&#9;">
@@ -25269,7 +25269,7 @@
             </ItfOutb>
             <NATRuleOptions>
               <Option name="color">#8BC065</Option>
-              <Option name="id"/>
+              <Option name="id"></Option>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id134748X19225" disabled="False" group="" position="3" action="Translate" comment="&#9;">
@@ -25300,7 +25300,7 @@
             </ItfOutb>
             <NATRuleOptions>
               <Option name="color">#8BC065</Option>
-              <Option name="id"/>
+              <Option name="id"></Option>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id134967X19225" disabled="False" group="" position="4" action="Translate" comment="">
@@ -25359,7 +25359,7 @@
             </ItfOutb>
             <NATRuleOptions>
               <Option name="color">#8BC065</Option>
-              <Option name="id"/>
+              <Option name="id"></Option>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id2090090X19225" disabled="False" group="" position="6" action="Translate" comment="&#9;">
@@ -25390,7 +25390,7 @@
             </ItfOutb>
             <NATRuleOptions>
               <Option name="color">#8BC065</Option>
-              <Option name="id"/>
+              <Option name="id"></Option>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id2385015X19225" disabled="False" group="" position="7" action="Translate" comment="">
@@ -25449,7 +25449,7 @@
             </ItfOutb>
             <NATRuleOptions>
               <Option name="color">#C0BA44</Option>
-              <Option name="id"/>
+              <Option name="id"></Option>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id135190X19225" disabled="False" group="" position="9" action="Translate" comment="">
@@ -25479,7 +25479,7 @@
             </ItfOutb>
             <NATRuleOptions>
               <Option name="color">#C0BA44</Option>
-              <Option name="id"/>
+              <Option name="id"></Option>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id135320X19225" disabled="False" group="" position="10" action="Translate" comment="">
@@ -25511,7 +25511,7 @@
             </ItfOutb>
             <NATRuleOptions>
               <Option name="color">#C0BA44</Option>
-              <Option name="id"/>
+              <Option name="id"></Option>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id135365X19225" disabled="False" group="" position="11" action="Translate" comment="">
@@ -25541,7 +25541,7 @@
             </ItfOutb>
             <NATRuleOptions>
               <Option name="color">#C0BA44</Option>
-              <Option name="id"/>
+              <Option name="id"></Option>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id2384823X19225" disabled="False" group="" position="12" action="Translate" comment="">
@@ -25571,7 +25571,7 @@
             </ItfOutb>
             <NATRuleOptions>
               <Option name="color">#C0BA44</Option>
-              <Option name="id"/>
+              <Option name="id"></Option>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id2384735X19225" disabled="False" group="" position="13" action="Translate" comment="">
@@ -25603,7 +25603,7 @@
             </ItfOutb>
             <NATRuleOptions>
               <Option name="color">#C0BA44</Option>
-              <Option name="id"/>
+              <Option name="id"></Option>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id2384923X19225" disabled="False" group="" position="14" action="Translate" comment="">
@@ -25633,7 +25633,7 @@
             </ItfOutb>
             <NATRuleOptions>
               <Option name="color">#C0BA44</Option>
-              <Option name="id"/>
+              <Option name="id"></Option>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id135408X19225" disabled="False" group="" position="15" action="Translate" comment="REDIRECT&#10;">
@@ -25685,8 +25685,8 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="id"/>
-              <Option name="pf_classify_str"/>
+              <Option name="id"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -25725,55 +25725,55 @@
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">False</Option>
           <Option name="action_on_reject">ICMP net unreachable</Option>
-          <Option name="activationCmd"/>
-          <Option name="admUser"/>
-          <Option name="altAddress"/>
+          <Option name="activationCmd"></Option>
+          <Option name="admUser"></Option>
+          <Option name="altAddress"></Option>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">true</Option>
           <Option name="clamp_mss_to_mtu">True</Option>
           <Option name="classify_mark_terminating">False</Option>
           <Option name="cmdline">-xt</Option>
-          <Option name="compiler"/>
+          <Option name="compiler"></Option>
           <Option name="configure_interfaces">true</Option>
           <Option name="debug">False</Option>
           <Option name="drop_invalid">True</Option>
           <Option name="dyn_addr">False</Option>
-          <Option name="epilog_script"/>
+          <Option name="epilog_script"></Option>
           <Option name="firewall_dir">/etc</Option>
           <Option name="firewall_is_part_of_any">True</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="freebsd_ip_forward">1</Option>
-          <Option name="id"/>
+          <Option name="id"></Option>
           <Option name="ignore_empty_groups">False</Option>
           <Option name="in_out_code">true</Option>
-          <Option name="inst_cmdline"/>
-          <Option name="inst_script"/>
-          <Option name="install_script"/>
+          <Option name="inst_cmdline"></Option>
+          <Option name="inst_script"></Option>
+          <Option name="install_script"></Option>
           <Option name="ipv4_6_order">ipv4_first</Option>
           <Option name="limit_suffix">/second</Option>
           <Option name="limit_value">5</Option>
           <Option name="linux24_accept_redirects">0</Option>
           <Option name="linux24_accept_source_route">0</Option>
           <Option name="linux24_icmp_echo_ignore_all">1</Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
           <Option name="linux24_icmp_ignore_bogus_error_responses">1</Option>
-          <Option name="linux24_ip_dynaddr"/>
+          <Option name="linux24_ip_dynaddr"></Option>
           <Option name="linux24_ip_forward">1</Option>
           <Option name="linux24_log_martians">1</Option>
-          <Option name="linux24_path_ip"/>
-          <Option name="linux24_path_iptables"/>
-          <Option name="linux24_path_logger"/>
-          <Option name="linux24_path_lsmod"/>
-          <Option name="linux24_path_modprobe"/>
+          <Option name="linux24_path_ip"></Option>
+          <Option name="linux24_path_iptables"></Option>
+          <Option name="linux24_path_logger"></Option>
+          <Option name="linux24_path_lsmod"></Option>
+          <Option name="linux24_path_modprobe"></Option>
           <Option name="linux24_rp_filter">1</Option>
-          <Option name="linux24_tcp_ecn"/>
-          <Option name="linux24_tcp_fack"/>
+          <Option name="linux24_tcp_ecn"></Option>
+          <Option name="linux24_tcp_fack"></Option>
           <Option name="linux24_tcp_fin_timeout">30</Option>
           <Option name="linux24_tcp_keepalive_interval">1800</Option>
-          <Option name="linux24_tcp_sack"/>
-          <Option name="linux24_tcp_syncookies"/>
-          <Option name="linux24_tcp_timestamps"/>
-          <Option name="linux24_tcp_window_scaling"/>
+          <Option name="linux24_tcp_sack"></Option>
+          <Option name="linux24_tcp_syncookies"></Option>
+          <Option name="linux24_tcp_timestamps"></Option>
+          <Option name="linux24_tcp_window_scaling"></Option>
           <Option name="load_modules">False</Option>
           <Option name="local_nat">True</Option>
           <Option name="log_all">False</Option>
@@ -25788,13 +25788,13 @@
           <Option name="log_tcp_seq">False</Option>
           <Option name="loopback_interface">lo0</Option>
           <Option name="manage_virtual_addr">true</Option>
-          <Option name="mgmt_addr"/>
+          <Option name="mgmt_addr"></Option>
           <Option name="mgmt_ssh">False</Option>
           <Option name="no_iochains_for_any">False</Option>
           <Option name="no_ipv6_default_policy">False</Option>
           <Option name="no_optimisation">False</Option>
           <Option name="openbsd_ip_forward">1</Option>
-          <Option name="output_file"/>
+          <Option name="output_file"></Option>
           <Option name="pass_all_out">false</Option>
           <Option name="pf_limit_frags">5000</Option>
           <Option name="pf_limit_states">10000</Option>
@@ -25803,14 +25803,14 @@
           <Option name="pf_timeout_interval">10</Option>
           <Option name="platform">iptables</Option>
           <Option name="prolog_place">after_flush</Option>
-          <Option name="prolog_script"/>
+          <Option name="prolog_script"></Option>
           <Option name="proxy_arp">True</Option>
-          <Option name="scpArgs"/>
-          <Option name="script_env_path"/>
-          <Option name="snmp_contact"/>
-          <Option name="snmp_description"/>
-          <Option name="snmp_location"/>
-          <Option name="sshArgs"/>
+          <Option name="scpArgs"></Option>
+          <Option name="script_env_path"></Option>
+          <Option name="snmp_contact"></Option>
+          <Option name="snmp_description"></Option>
+          <Option name="snmp_location"></Option>
+          <Option name="sshArgs"></Option>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -25844,31 +25844,31 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
+              <Option name="action_on_reject"></Option>
               <Option name="classification">False</Option>
-              <Option name="classify_str"/>
+              <Option name="classify_str"></Option>
               <Option name="color">#C0BA44</Option>
-              <Option name="custom_str"/>
-              <Option name="ipf_route_opt_addr"/>
-              <Option name="ipf_route_opt_if"/>
+              <Option name="custom_str"></Option>
+              <Option name="ipf_route_opt_addr"></Option>
+              <Option name="ipf_route_opt_if"></Option>
               <Option name="ipf_route_option">route_reply_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"/>
-              <Option name="ipt_iif"/>
+              <Option name="ipt_gw"></Option>
+              <Option name="ipt_iif"></Option>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"/>
+              <Option name="ipt_oif"></Option>
               <Option name="ipt_tee">False</Option>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_keep_state">False</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">0</Option>
@@ -25877,15 +25877,15 @@
               <Option name="pf_no_sync">False</Option>
               <Option name="pf_pflow">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"/>
-              <Option name="pf_route_opt_if"/>
+              <Option name="pf_route_opt_addr"></Option>
+              <Option name="pf_route_opt_if"></Option>
               <Option name="pf_route_option">none</Option>
               <Option name="pf_rule_max_state">0</Option>
               <Option name="pf_sloppy_tracker">False</Option>
               <Option name="pf_source_tracking">False</Option>
               <Option name="pf_synproxy">False</Option>
               <Option name="routing">False</Option>
-              <Option name="rule_name_accounting"/>
+              <Option name="rule_name_accounting"></Option>
               <Option name="stateless">True</Option>
               <Option name="tagging">True</Option>
               <Option name="tagobject_id">id1391120443</Option>
@@ -25908,31 +25908,31 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
+              <Option name="action_on_reject"></Option>
               <Option name="classification">False</Option>
-              <Option name="classify_str"/>
+              <Option name="classify_str"></Option>
               <Option name="color">#C0BA44</Option>
-              <Option name="custom_str"/>
-              <Option name="ipf_route_opt_addr"/>
-              <Option name="ipf_route_opt_if"/>
+              <Option name="custom_str"></Option>
+              <Option name="ipf_route_opt_addr"></Option>
+              <Option name="ipf_route_opt_if"></Option>
               <Option name="ipf_route_option">route_reply_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"/>
-              <Option name="ipt_iif"/>
+              <Option name="ipt_gw"></Option>
+              <Option name="ipt_iif"></Option>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"/>
+              <Option name="ipt_oif"></Option>
               <Option name="ipt_tee">False</Option>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_keep_state">False</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">0</Option>
@@ -25941,15 +25941,15 @@
               <Option name="pf_no_sync">False</Option>
               <Option name="pf_pflow">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"/>
-              <Option name="pf_route_opt_if"/>
+              <Option name="pf_route_opt_addr"></Option>
+              <Option name="pf_route_opt_if"></Option>
               <Option name="pf_route_option">none</Option>
               <Option name="pf_rule_max_state">0</Option>
               <Option name="pf_sloppy_tracker">False</Option>
               <Option name="pf_source_tracking">False</Option>
               <Option name="pf_synproxy">False</Option>
               <Option name="routing">False</Option>
-              <Option name="rule_name_accounting"/>
+              <Option name="rule_name_accounting"></Option>
               <Option name="stateless">False</Option>
               <Option name="tagging">True</Option>
               <Option name="tagobject_id">id1391120443</Option>
@@ -25972,31 +25972,31 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
+              <Option name="action_on_reject"></Option>
               <Option name="classification">False</Option>
-              <Option name="classify_str"/>
+              <Option name="classify_str"></Option>
               <Option name="color">#C0BA44</Option>
-              <Option name="custom_str"/>
-              <Option name="ipf_route_opt_addr"/>
-              <Option name="ipf_route_opt_if"/>
+              <Option name="custom_str"></Option>
+              <Option name="ipf_route_opt_addr"></Option>
+              <Option name="ipf_route_opt_if"></Option>
               <Option name="ipf_route_option">route_reply_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"/>
-              <Option name="ipt_iif"/>
+              <Option name="ipt_gw"></Option>
+              <Option name="ipt_iif"></Option>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"/>
+              <Option name="ipt_oif"></Option>
               <Option name="ipt_tee">False</Option>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_keep_state">False</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">0</Option>
@@ -26005,15 +26005,15 @@
               <Option name="pf_no_sync">False</Option>
               <Option name="pf_pflow">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"/>
-              <Option name="pf_route_opt_if"/>
+              <Option name="pf_route_opt_addr"></Option>
+              <Option name="pf_route_opt_if"></Option>
               <Option name="pf_route_option">none</Option>
               <Option name="pf_rule_max_state">0</Option>
               <Option name="pf_sloppy_tracker">False</Option>
               <Option name="pf_source_tracking">False</Option>
               <Option name="pf_synproxy">False</Option>
               <Option name="routing">False</Option>
-              <Option name="rule_name_accounting"/>
+              <Option name="rule_name_accounting"></Option>
               <Option name="stateless">False</Option>
               <Option name="tagging">True</Option>
               <Option name="tagobject_id">id1391120443</Option>
@@ -26036,31 +26036,31 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
+              <Option name="action_on_reject"></Option>
               <Option name="classification">False</Option>
-              <Option name="classify_str"/>
+              <Option name="classify_str"></Option>
               <Option name="color">#C0BA44</Option>
-              <Option name="custom_str"/>
-              <Option name="ipf_route_opt_addr"/>
-              <Option name="ipf_route_opt_if"/>
+              <Option name="custom_str"></Option>
+              <Option name="ipf_route_opt_addr"></Option>
+              <Option name="ipf_route_opt_if"></Option>
               <Option name="ipf_route_option">route_reply_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"/>
-              <Option name="ipt_iif"/>
+              <Option name="ipt_gw"></Option>
+              <Option name="ipt_iif"></Option>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"/>
+              <Option name="ipt_oif"></Option>
               <Option name="ipt_tee">False</Option>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_keep_state">False</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">0</Option>
@@ -26069,15 +26069,15 @@
               <Option name="pf_no_sync">False</Option>
               <Option name="pf_pflow">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"/>
-              <Option name="pf_route_opt_if"/>
+              <Option name="pf_route_opt_addr"></Option>
+              <Option name="pf_route_opt_if"></Option>
               <Option name="pf_route_option">none</Option>
               <Option name="pf_rule_max_state">0</Option>
               <Option name="pf_sloppy_tracker">False</Option>
               <Option name="pf_source_tracking">False</Option>
               <Option name="pf_synproxy">False</Option>
               <Option name="routing">False</Option>
-              <Option name="rule_name_accounting"/>
+              <Option name="rule_name_accounting"></Option>
               <Option name="stateless">True</Option>
               <Option name="tagging">True</Option>
               <Option name="tagobject_id">id1391120443</Option>
@@ -26100,31 +26100,31 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
+              <Option name="action_on_reject"></Option>
               <Option name="classification">False</Option>
-              <Option name="classify_str"/>
+              <Option name="classify_str"></Option>
               <Option name="color">#C0BA44</Option>
-              <Option name="custom_str"/>
-              <Option name="ipf_route_opt_addr"/>
-              <Option name="ipf_route_opt_if"/>
+              <Option name="custom_str"></Option>
+              <Option name="ipf_route_opt_addr"></Option>
+              <Option name="ipf_route_opt_if"></Option>
               <Option name="ipf_route_option">route_reply_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"/>
-              <Option name="ipt_iif"/>
+              <Option name="ipt_gw"></Option>
+              <Option name="ipt_iif"></Option>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"/>
+              <Option name="ipt_oif"></Option>
               <Option name="ipt_tee">False</Option>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_keep_state">False</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">0</Option>
@@ -26133,15 +26133,15 @@
               <Option name="pf_no_sync">False</Option>
               <Option name="pf_pflow">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"/>
-              <Option name="pf_route_opt_if"/>
+              <Option name="pf_route_opt_addr"></Option>
+              <Option name="pf_route_opt_if"></Option>
               <Option name="pf_route_option">none</Option>
               <Option name="pf_rule_max_state">0</Option>
               <Option name="pf_sloppy_tracker">False</Option>
               <Option name="pf_source_tracking">False</Option>
               <Option name="pf_synproxy">False</Option>
               <Option name="routing">False</Option>
-              <Option name="rule_name_accounting"/>
+              <Option name="rule_name_accounting"></Option>
               <Option name="stateless">True</Option>
               <Option name="tagging">True</Option>
               <Option name="tagobject_id">id1391120443</Option>
@@ -26164,32 +26164,32 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
+              <Option name="action_on_reject"></Option>
               <Option name="branch_id">id164851X32371</Option>
               <Option name="classification">False</Option>
-              <Option name="classify_str"/>
+              <Option name="classify_str"></Option>
               <Option name="color">#C0BA44</Option>
-              <Option name="custom_str"/>
-              <Option name="ipf_route_opt_addr"/>
-              <Option name="ipf_route_opt_if"/>
+              <Option name="custom_str"></Option>
+              <Option name="ipf_route_opt_addr"></Option>
+              <Option name="ipf_route_opt_if"></Option>
               <Option name="ipf_route_option">route_reply_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"/>
-              <Option name="ipt_iif"/>
+              <Option name="ipt_gw"></Option>
+              <Option name="ipt_iif"></Option>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"/>
+              <Option name="ipt_oif"></Option>
               <Option name="ipt_tee">False</Option>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_keep_state">False</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">0</Option>
@@ -26198,15 +26198,15 @@
               <Option name="pf_no_sync">False</Option>
               <Option name="pf_pflow">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"/>
-              <Option name="pf_route_opt_if"/>
+              <Option name="pf_route_opt_addr"></Option>
+              <Option name="pf_route_opt_if"></Option>
               <Option name="pf_route_option">none</Option>
               <Option name="pf_rule_max_state">0</Option>
               <Option name="pf_sloppy_tracker">False</Option>
               <Option name="pf_source_tracking">False</Option>
               <Option name="pf_synproxy">False</Option>
               <Option name="routing">False</Option>
-              <Option name="rule_name_accounting"/>
+              <Option name="rule_name_accounting"></Option>
               <Option name="stateless">True</Option>
               <Option name="tagging">True</Option>
               <Option name="tagobject_id">id1391120443</Option>
@@ -26229,31 +26229,31 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
+              <Option name="action_on_reject"></Option>
               <Option name="classification">True</Option>
               <Option name="classify_str">ssh_q</Option>
               <Option name="color">#8BC065</Option>
-              <Option name="custom_str"/>
-              <Option name="ipf_route_opt_addr"/>
-              <Option name="ipf_route_opt_if"/>
+              <Option name="custom_str"></Option>
+              <Option name="ipf_route_opt_addr"></Option>
+              <Option name="ipf_route_opt_if"></Option>
               <Option name="ipf_route_option">route_reply_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"/>
-              <Option name="ipt_iif"/>
+              <Option name="ipt_gw"></Option>
+              <Option name="ipt_iif"></Option>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"/>
+              <Option name="ipt_oif"></Option>
               <Option name="ipt_tee">False</Option>
-              <Option name="log_prefix"/>
+              <Option name="log_prefix"></Option>
               <Option name="pf_classify_str">ssh_q</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_keep_state">False</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">0</Option>
@@ -26262,15 +26262,15 @@
               <Option name="pf_no_sync">False</Option>
               <Option name="pf_pflow">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"/>
-              <Option name="pf_route_opt_if"/>
+              <Option name="pf_route_opt_addr"></Option>
+              <Option name="pf_route_opt_if"></Option>
               <Option name="pf_route_option">none</Option>
               <Option name="pf_rule_max_state">0</Option>
               <Option name="pf_sloppy_tracker">False</Option>
               <Option name="pf_source_tracking">False</Option>
               <Option name="pf_synproxy">False</Option>
               <Option name="routing">False</Option>
-              <Option name="rule_name_accounting"/>
+              <Option name="rule_name_accounting"></Option>
               <Option name="stateless">True</Option>
               <Option name="tagging">False</Option>
             </PolicyRuleOptions>
@@ -26292,31 +26292,31 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
+              <Option name="action_on_reject"></Option>
               <Option name="classification">True</Option>
               <Option name="classify_str">ssh_q</Option>
               <Option name="color">#8BC065</Option>
-              <Option name="custom_str"/>
-              <Option name="ipf_route_opt_addr"/>
-              <Option name="ipf_route_opt_if"/>
+              <Option name="custom_str"></Option>
+              <Option name="ipf_route_opt_addr"></Option>
+              <Option name="ipf_route_opt_if"></Option>
               <Option name="ipf_route_option">route_reply_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"/>
-              <Option name="ipt_iif"/>
+              <Option name="ipt_gw"></Option>
+              <Option name="ipt_iif"></Option>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"/>
+              <Option name="ipt_oif"></Option>
               <Option name="ipt_tee">False</Option>
-              <Option name="log_prefix"/>
+              <Option name="log_prefix"></Option>
               <Option name="pf_classify_str">ssh_q</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_keep_state">False</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">0</Option>
@@ -26325,18 +26325,18 @@
               <Option name="pf_no_sync">False</Option>
               <Option name="pf_pflow">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"/>
-              <Option name="pf_route_opt_if"/>
+              <Option name="pf_route_opt_addr"></Option>
+              <Option name="pf_route_opt_if"></Option>
               <Option name="pf_route_option">none</Option>
               <Option name="pf_rule_max_state">0</Option>
               <Option name="pf_sloppy_tracker">False</Option>
               <Option name="pf_source_tracking">False</Option>
               <Option name="pf_synproxy">False</Option>
               <Option name="routing">False</Option>
-              <Option name="rule_name_accounting"/>
+              <Option name="rule_name_accounting"></Option>
               <Option name="stateless">False</Option>
               <Option name="tagging">False</Option>
-              <Option name="tagobject_id"/>
+              <Option name="tagobject_id"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id190018X32371" disabled="False" group="classify" log="False" position="8" action="Accept" direction="Both" comment="">
@@ -26356,31 +26356,31 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
+              <Option name="action_on_reject"></Option>
               <Option name="classification">True</Option>
               <Option name="classify_str">ssh_q</Option>
               <Option name="color">#8BC065</Option>
-              <Option name="custom_str"/>
-              <Option name="ipf_route_opt_addr"/>
-              <Option name="ipf_route_opt_if"/>
+              <Option name="custom_str"></Option>
+              <Option name="ipf_route_opt_addr"></Option>
+              <Option name="ipf_route_opt_if"></Option>
               <Option name="ipf_route_option">route_reply_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"/>
-              <Option name="ipt_iif"/>
+              <Option name="ipt_gw"></Option>
+              <Option name="ipt_iif"></Option>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"/>
+              <Option name="ipt_oif"></Option>
               <Option name="ipt_tee">False</Option>
-              <Option name="log_prefix"/>
+              <Option name="log_prefix"></Option>
               <Option name="pf_classify_str">ssh_q</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_keep_state">False</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">0</Option>
@@ -26389,15 +26389,15 @@
               <Option name="pf_no_sync">False</Option>
               <Option name="pf_pflow">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"/>
-              <Option name="pf_route_opt_if"/>
+              <Option name="pf_route_opt_addr"></Option>
+              <Option name="pf_route_opt_if"></Option>
               <Option name="pf_route_option">none</Option>
               <Option name="pf_rule_max_state">0</Option>
               <Option name="pf_sloppy_tracker">False</Option>
               <Option name="pf_source_tracking">False</Option>
               <Option name="pf_synproxy">False</Option>
               <Option name="routing">False</Option>
-              <Option name="rule_name_accounting"/>
+              <Option name="rule_name_accounting"></Option>
               <Option name="stateless">False</Option>
               <Option name="tagging">False</Option>
             </PolicyRuleOptions>
@@ -26419,31 +26419,31 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
+              <Option name="action_on_reject"></Option>
               <Option name="classification">True</Option>
               <Option name="classify_str">ssh_q</Option>
               <Option name="color">#8BC065</Option>
-              <Option name="custom_str"/>
-              <Option name="ipf_route_opt_addr"/>
-              <Option name="ipf_route_opt_if"/>
+              <Option name="custom_str"></Option>
+              <Option name="ipf_route_opt_addr"></Option>
+              <Option name="ipf_route_opt_if"></Option>
               <Option name="ipf_route_option">route_reply_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"/>
-              <Option name="ipt_iif"/>
+              <Option name="ipt_gw"></Option>
+              <Option name="ipt_iif"></Option>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"/>
+              <Option name="ipt_oif"></Option>
               <Option name="ipt_tee">False</Option>
-              <Option name="log_prefix"/>
+              <Option name="log_prefix"></Option>
               <Option name="pf_classify_str">ssh_q</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_keep_state">False</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">0</Option>
@@ -26452,18 +26452,18 @@
               <Option name="pf_no_sync">False</Option>
               <Option name="pf_pflow">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"/>
-              <Option name="pf_route_opt_if"/>
+              <Option name="pf_route_opt_addr"></Option>
+              <Option name="pf_route_opt_if"></Option>
               <Option name="pf_route_option">none</Option>
               <Option name="pf_rule_max_state">0</Option>
               <Option name="pf_sloppy_tracker">False</Option>
               <Option name="pf_source_tracking">False</Option>
               <Option name="pf_synproxy">False</Option>
               <Option name="routing">False</Option>
-              <Option name="rule_name_accounting"/>
+              <Option name="rule_name_accounting"></Option>
               <Option name="stateless">True</Option>
               <Option name="tagging">False</Option>
-              <Option name="tagobject_id"/>
+              <Option name="tagobject_id"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id190074X32371" disabled="False" group="classify" log="False" position="10" action="Accounting" direction="Both" comment="">
@@ -26483,31 +26483,31 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
+              <Option name="action_on_reject"></Option>
               <Option name="classification">True</Option>
               <Option name="classify_str">ssh_q</Option>
               <Option name="color">#8BC065</Option>
-              <Option name="custom_str"/>
-              <Option name="ipf_route_opt_addr"/>
-              <Option name="ipf_route_opt_if"/>
+              <Option name="custom_str"></Option>
+              <Option name="ipf_route_opt_addr"></Option>
+              <Option name="ipf_route_opt_if"></Option>
               <Option name="ipf_route_option">route_reply_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"/>
-              <Option name="ipt_iif"/>
+              <Option name="ipt_gw"></Option>
+              <Option name="ipt_iif"></Option>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"/>
+              <Option name="ipt_oif"></Option>
               <Option name="ipt_tee">False</Option>
-              <Option name="log_prefix"/>
+              <Option name="log_prefix"></Option>
               <Option name="pf_classify_str">ssh_q</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_keep_state">False</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">0</Option>
@@ -26516,15 +26516,15 @@
               <Option name="pf_no_sync">False</Option>
               <Option name="pf_pflow">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"/>
-              <Option name="pf_route_opt_if"/>
+              <Option name="pf_route_opt_addr"></Option>
+              <Option name="pf_route_opt_if"></Option>
               <Option name="pf_route_option">none</Option>
               <Option name="pf_rule_max_state">0</Option>
               <Option name="pf_sloppy_tracker">False</Option>
               <Option name="pf_source_tracking">False</Option>
               <Option name="pf_synproxy">False</Option>
               <Option name="routing">False</Option>
-              <Option name="rule_name_accounting"/>
+              <Option name="rule_name_accounting"></Option>
               <Option name="stateless">True</Option>
               <Option name="tagging">False</Option>
             </PolicyRuleOptions>
@@ -26546,32 +26546,32 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
+              <Option name="action_on_reject"></Option>
               <Option name="branch_id">id164851X32371</Option>
               <Option name="classification">True</Option>
               <Option name="classify_str">ssh_q</Option>
               <Option name="color">#8BC065</Option>
-              <Option name="custom_str"/>
-              <Option name="ipf_route_opt_addr"/>
-              <Option name="ipf_route_opt_if"/>
+              <Option name="custom_str"></Option>
+              <Option name="ipf_route_opt_addr"></Option>
+              <Option name="ipf_route_opt_if"></Option>
               <Option name="ipf_route_option">route_reply_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"/>
-              <Option name="ipt_iif"/>
+              <Option name="ipt_gw"></Option>
+              <Option name="ipt_iif"></Option>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"/>
+              <Option name="ipt_oif"></Option>
               <Option name="ipt_tee">False</Option>
-              <Option name="log_prefix"/>
+              <Option name="log_prefix"></Option>
               <Option name="pf_classify_str">ssh_q</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_keep_state">False</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">0</Option>
@@ -26580,15 +26580,15 @@
               <Option name="pf_no_sync">False</Option>
               <Option name="pf_pflow">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"/>
-              <Option name="pf_route_opt_if"/>
+              <Option name="pf_route_opt_addr"></Option>
+              <Option name="pf_route_opt_if"></Option>
               <Option name="pf_route_option">none</Option>
               <Option name="pf_rule_max_state">0</Option>
               <Option name="pf_sloppy_tracker">False</Option>
               <Option name="pf_source_tracking">False</Option>
               <Option name="pf_synproxy">False</Option>
               <Option name="routing">False</Option>
-              <Option name="rule_name_accounting"/>
+              <Option name="rule_name_accounting"></Option>
               <Option name="stateless">True</Option>
               <Option name="tagging">False</Option>
             </PolicyRuleOptions>
@@ -26612,14 +26612,14 @@
             <PolicyRuleOptions>
               <Option name="classification">False</Option>
               <Option name="color">#7694C0</Option>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_keep_state">False</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">0</Option>
@@ -26638,7 +26638,7 @@
               <Option name="routing">True</Option>
               <Option name="stateless">True</Option>
               <Option name="tagging">False</Option>
-              <Option name="tagobject_id"/>
+              <Option name="tagobject_id"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id825253X32371" disabled="False" group="route" log="False" position="13" action="Continue" direction="Both" comment="">
@@ -26660,14 +26660,14 @@
             <PolicyRuleOptions>
               <Option name="classification">False</Option>
               <Option name="color">#7694C0</Option>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_keep_state">False</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">0</Option>
@@ -26686,7 +26686,7 @@
               <Option name="routing">True</Option>
               <Option name="stateless">False</Option>
               <Option name="tagging">False</Option>
-              <Option name="tagobject_id"/>
+              <Option name="tagobject_id"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id518537X32371" disabled="False" group="route" log="False" position="14" action="Accept" direction="Both" comment="">
@@ -26708,14 +26708,14 @@
             <PolicyRuleOptions>
               <Option name="classification">False</Option>
               <Option name="color">#7694C0</Option>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_keep_state">False</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">0</Option>
@@ -26734,7 +26734,7 @@
               <Option name="routing">True</Option>
               <Option name="stateless">False</Option>
               <Option name="tagging">False</Option>
-              <Option name="tagobject_id"/>
+              <Option name="tagobject_id"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id825333X32371" disabled="False" group="route" log="False" position="15" action="Accept" direction="Both" comment="">
@@ -26756,14 +26756,14 @@
             <PolicyRuleOptions>
               <Option name="classification">False</Option>
               <Option name="color">#7694C0</Option>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_keep_state">False</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">0</Option>
@@ -26782,7 +26782,7 @@
               <Option name="routing">True</Option>
               <Option name="stateless">True</Option>
               <Option name="tagging">False</Option>
-              <Option name="tagobject_id"/>
+              <Option name="tagobject_id"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id518593X32371" disabled="False" group="route" log="False" position="16" action="Accounting" direction="Both" comment="">
@@ -26804,14 +26804,14 @@
             <PolicyRuleOptions>
               <Option name="classification">False</Option>
               <Option name="color">#7694C0</Option>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_keep_state">False</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">0</Option>
@@ -26830,7 +26830,7 @@
               <Option name="routing">True</Option>
               <Option name="stateless">True</Option>
               <Option name="tagging">False</Option>
-              <Option name="tagobject_id"/>
+              <Option name="tagobject_id"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id518649X32371" disabled="False" group="route" log="False" position="17" action="Branch" direction="Both" comment="">
@@ -26850,20 +26850,20 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
+              <Option name="action_on_reject"></Option>
               <Option name="branch_id">id164851X32371</Option>
               <Option name="classification">False</Option>
               <Option name="color">#7694C0</Option>
-              <Option name="custom_str"/>
+              <Option name="custom_str"></Option>
               <Option name="ipfw_pipe_port_num">0</Option>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_keep_state">False</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">0</Option>
@@ -26880,10 +26880,10 @@
               <Option name="pf_source_tracking">False</Option>
               <Option name="pf_synproxy">False</Option>
               <Option name="routing">True</Option>
-              <Option name="rule_name_accounting"/>
+              <Option name="rule_name_accounting"></Option>
               <Option name="stateless">True</Option>
               <Option name="tagging">False</Option>
-              <Option name="tagobject_id"/>
+              <Option name="tagobject_id"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id928733X32371" disabled="False" group="tag + classify" log="False" position="18" action="Continue" direction="Both" comment="">
@@ -26904,14 +26904,14 @@
             </When>
             <PolicyRuleOptions>
               <Option name="classification">True</Option>
-              <Option name="log_prefix"/>
+              <Option name="log_prefix"></Option>
               <Option name="pf_classify_str">ssh_q</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_keep_state">False</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">0</Option>
@@ -26920,8 +26920,8 @@
               <Option name="pf_no_sync">False</Option>
               <Option name="pf_pflow">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"/>
-              <Option name="pf_route_opt_if"/>
+              <Option name="pf_route_opt_addr"></Option>
+              <Option name="pf_route_opt_if"></Option>
               <Option name="pf_route_option">none</Option>
               <Option name="pf_rule_max_state">0</Option>
               <Option name="pf_sloppy_tracker">False</Option>
@@ -26951,14 +26951,14 @@
             </When>
             <PolicyRuleOptions>
               <Option name="classification">True</Option>
-              <Option name="log_prefix"/>
+              <Option name="log_prefix"></Option>
               <Option name="pf_classify_str">ssh_q</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_keep_state">False</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">0</Option>
@@ -26967,8 +26967,8 @@
               <Option name="pf_no_sync">False</Option>
               <Option name="pf_pflow">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"/>
-              <Option name="pf_route_opt_if"/>
+              <Option name="pf_route_opt_addr"></Option>
+              <Option name="pf_route_opt_if"></Option>
               <Option name="pf_route_option">none</Option>
               <Option name="pf_rule_max_state">0</Option>
               <Option name="pf_sloppy_tracker">False</Option>
@@ -26998,14 +26998,14 @@
             </When>
             <PolicyRuleOptions>
               <Option name="classification">True</Option>
-              <Option name="log_prefix"/>
+              <Option name="log_prefix"></Option>
               <Option name="pf_classify_str">ssh_q</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_keep_state">False</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">0</Option>
@@ -27014,8 +27014,8 @@
               <Option name="pf_no_sync">False</Option>
               <Option name="pf_pflow">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"/>
-              <Option name="pf_route_opt_if"/>
+              <Option name="pf_route_opt_addr"></Option>
+              <Option name="pf_route_opt_if"></Option>
               <Option name="pf_route_option">none</Option>
               <Option name="pf_rule_max_state">0</Option>
               <Option name="pf_sloppy_tracker">False</Option>
@@ -27045,14 +27045,14 @@
             </When>
             <PolicyRuleOptions>
               <Option name="classification">True</Option>
-              <Option name="log_prefix"/>
+              <Option name="log_prefix"></Option>
               <Option name="pf_classify_str">ssh_q</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_keep_state">False</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">0</Option>
@@ -27061,8 +27061,8 @@
               <Option name="pf_no_sync">False</Option>
               <Option name="pf_pflow">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"/>
-              <Option name="pf_route_opt_if"/>
+              <Option name="pf_route_opt_addr"></Option>
+              <Option name="pf_route_opt_if"></Option>
               <Option name="pf_route_option">none</Option>
               <Option name="pf_rule_max_state">0</Option>
               <Option name="pf_sloppy_tracker">False</Option>
@@ -27092,14 +27092,14 @@
             </When>
             <PolicyRuleOptions>
               <Option name="classification">True</Option>
-              <Option name="log_prefix"/>
+              <Option name="log_prefix"></Option>
               <Option name="pf_classify_str">ssh_q</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_keep_state">False</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">0</Option>
@@ -27108,8 +27108,8 @@
               <Option name="pf_no_sync">False</Option>
               <Option name="pf_pflow">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"/>
-              <Option name="pf_route_opt_if"/>
+              <Option name="pf_route_opt_addr"></Option>
+              <Option name="pf_route_opt_if"></Option>
               <Option name="pf_route_option">none</Option>
               <Option name="pf_rule_max_state">0</Option>
               <Option name="pf_sloppy_tracker">False</Option>
@@ -27138,19 +27138,19 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
+              <Option name="action_on_reject"></Option>
               <Option name="branch_id">id164851X32371</Option>
               <Option name="classification">True</Option>
-              <Option name="custom_str"/>
+              <Option name="custom_str"></Option>
               <Option name="ipfw_pipe_port_num">0</Option>
-              <Option name="log_prefix"/>
+              <Option name="log_prefix"></Option>
               <Option name="pf_classify_str">ssh_q</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_keep_state">False</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">0</Option>
@@ -27159,15 +27159,15 @@
               <Option name="pf_no_sync">False</Option>
               <Option name="pf_pflow">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"/>
-              <Option name="pf_route_opt_if"/>
+              <Option name="pf_route_opt_addr"></Option>
+              <Option name="pf_route_opt_if"></Option>
               <Option name="pf_route_option">none</Option>
               <Option name="pf_rule_max_state">0</Option>
               <Option name="pf_sloppy_tracker">False</Option>
               <Option name="pf_source_tracking">False</Option>
               <Option name="pf_synproxy">False</Option>
               <Option name="routing">False</Option>
-              <Option name="rule_name_accounting"/>
+              <Option name="rule_name_accounting"></Option>
               <Option name="stateless">True</Option>
               <Option name="tagging">True</Option>
               <Option name="tagobject_id">id1391120443</Option>
@@ -27192,14 +27192,14 @@
             <PolicyRuleOptions>
               <Option name="classification">True</Option>
               <Option name="color">#A37EC0</Option>
-              <Option name="log_prefix"/>
+              <Option name="log_prefix"></Option>
               <Option name="pf_classify_str">ssh_q</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_keep_state">False</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">0</Option>
@@ -27240,14 +27240,14 @@
             <PolicyRuleOptions>
               <Option name="classification">True</Option>
               <Option name="color">#A37EC0</Option>
-              <Option name="log_prefix"/>
+              <Option name="log_prefix"></Option>
               <Option name="pf_classify_str">ssh_q</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_keep_state">False</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">0</Option>
@@ -27288,14 +27288,14 @@
             <PolicyRuleOptions>
               <Option name="classification">True</Option>
               <Option name="color">#A37EC0</Option>
-              <Option name="log_prefix"/>
+              <Option name="log_prefix"></Option>
               <Option name="pf_classify_str">ssh_q</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_keep_state">False</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">0</Option>
@@ -27336,14 +27336,14 @@
             <PolicyRuleOptions>
               <Option name="classification">True</Option>
               <Option name="color">#A37EC0</Option>
-              <Option name="log_prefix"/>
+              <Option name="log_prefix"></Option>
               <Option name="pf_classify_str">ssh_q</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_keep_state">False</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">0</Option>
@@ -27384,14 +27384,14 @@
             <PolicyRuleOptions>
               <Option name="classification">True</Option>
               <Option name="color">#A37EC0</Option>
-              <Option name="log_prefix"/>
+              <Option name="log_prefix"></Option>
               <Option name="pf_classify_str">ssh_q</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_keep_state">False</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">0</Option>
@@ -27430,20 +27430,20 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
+              <Option name="action_on_reject"></Option>
               <Option name="branch_id">id164851X32371</Option>
               <Option name="classification">True</Option>
               <Option name="color">#A37EC0</Option>
-              <Option name="custom_str"/>
+              <Option name="custom_str"></Option>
               <Option name="ipfw_pipe_port_num">0</Option>
-              <Option name="log_prefix"/>
+              <Option name="log_prefix"></Option>
               <Option name="pf_classify_str">ssh_q</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_keep_state">False</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">0</Option>
@@ -27460,7 +27460,7 @@
               <Option name="pf_source_tracking">False</Option>
               <Option name="pf_synproxy">False</Option>
               <Option name="routing">True</Option>
-              <Option name="rule_name_accounting"/>
+              <Option name="rule_name_accounting"></Option>
               <Option name="stateless">True</Option>
               <Option name="tagging">True</Option>
               <Option name="tagobject_id">id1391120443</Option>
@@ -27483,20 +27483,20 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
+              <Option name="action_on_reject"></Option>
               <Option name="classification">False</Option>
-              <Option name="classify_str"/>
-              <Option name="custom_str"/>
+              <Option name="classify_str"></Option>
+              <Option name="custom_str"></Option>
               <Option name="ipfw_pipe_method">0</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
-              <Option name="log_prefix"/>
-              <Option name="pf_classify_str"/>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_keep_state">False</Option>
               <Option name="pf_max_src_conn">0</Option>
               <Option name="pf_max_src_conn_flush">False</Option>
               <Option name="pf_max_src_conn_global">False</Option>
-              <Option name="pf_max_src_conn_overload_table"/>
+              <Option name="pf_max_src_conn_overload_table"></Option>
               <Option name="pf_max_src_conn_rate_num">0</Option>
               <Option name="pf_max_src_conn_rate_seconds">0</Option>
               <Option name="pf_max_src_nodes">0</Option>
@@ -27505,18 +27505,18 @@
               <Option name="pf_no_sync">False</Option>
               <Option name="pf_pflow">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"/>
-              <Option name="pf_route_opt_if"/>
+              <Option name="pf_route_opt_addr"></Option>
+              <Option name="pf_route_opt_if"></Option>
               <Option name="pf_route_option">none</Option>
               <Option name="pf_rule_max_state">0</Option>
               <Option name="pf_sloppy_tracker">False</Option>
               <Option name="pf_source_tracking">False</Option>
               <Option name="pf_synproxy">False</Option>
               <Option name="routing">False</Option>
-              <Option name="rule_name_accounting"/>
+              <Option name="rule_name_accounting"></Option>
               <Option name="stateless">True</Option>
               <Option name="tagging">False</Option>
-              <Option name="tagobject_id"/>
+              <Option name="tagobject_id"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <RuleSetOptions/>
@@ -27551,15 +27551,15 @@
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
           <Option name="action_on_reject">ICMP net unreachable</Option>
-          <Option name="activationCmd"/>
-          <Option name="admUser"/>
-          <Option name="altAddress"/>
+          <Option name="activationCmd"></Option>
+          <Option name="admUser"></Option>
+          <Option name="altAddress"></Option>
           <Option name="check_shading">True</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
-          <Option name="cmdline"/>
-          <Option name="compiler"/>
-          <Option name="conf1_file"/>
-          <Option name="conf_file_name_on_firewall"/>
+          <Option name="cmdline"></Option>
+          <Option name="compiler"></Option>
+          <Option name="conf1_file"></Option>
+          <Option name="conf_file_name_on_firewall"></Option>
           <Option name="configure_bridge_interfaces">False</Option>
           <Option name="configure_carp_interfaces">False</Option>
           <Option name="configure_interfaces">False</Option>
@@ -27567,21 +27567,21 @@
           <Option name="configure_vlan_interfaces">False</Option>
           <Option name="debug">False</Option>
           <Option name="dyn_addr">False</Option>
-          <Option name="epilog_script"/>
+          <Option name="epilog_script"></Option>
           <Option name="fallback_log">False</Option>
-          <Option name="firewall_dir"/>
+          <Option name="firewall_dir"></Option>
           <Option name="firewall_is_part_of_any">True</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
-          <Option name="freebsd_path_ipf"/>
-          <Option name="freebsd_path_ipnat"/>
-          <Option name="freebsd_path_sysctl"/>
+          <Option name="freebsd_path_ipf"></Option>
+          <Option name="freebsd_path_ipnat"></Option>
+          <Option name="freebsd_path_sysctl"></Option>
           <Option name="generate_rc_conf_file">False</Option>
           <Option name="generate_shell_script">True</Option>
           <Option name="ignore_empty_groups">False</Option>
           <Option name="in_out_code">True</Option>
-          <Option name="inst_cmdline"/>
-          <Option name="inst_script"/>
-          <Option name="install_script"/>
+          <Option name="inst_cmdline"></Option>
+          <Option name="inst_script"></Option>
+          <Option name="install_script"></Option>
           <Option name="ipv4_6_order">ipv4_first</Option>
           <Option name="limit_suffix">/day</Option>
           <Option name="limit_value">0</Option>
@@ -27594,18 +27594,18 @@
           <Option name="log_level">debug</Option>
           <Option name="log_limit_suffix">/second</Option>
           <Option name="log_limit_value">0</Option>
-          <Option name="log_prefix"/>
+          <Option name="log_prefix"></Option>
           <Option name="log_tcp_opt">False</Option>
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"/>
+          <Option name="mgmt_addr"></Option>
           <Option name="mgmt_ssh">False</Option>
           <Option name="modulate_state">False</Option>
           <Option name="no_iochains_for_any">False</Option>
           <Option name="no_optimisation">False</Option>
-          <Option name="openbsd_path_pfctl"/>
-          <Option name="openbsd_path_sysctl"/>
-          <Option name="output_file"/>
+          <Option name="openbsd_path_pfctl"></Option>
+          <Option name="openbsd_path_sysctl"></Option>
+          <Option name="output_file"></Option>
           <Option name="pass_all_out">False</Option>
           <Option name="pf_adaptive_end">0</Option>
           <Option name="pf_adaptive_start">0</Option>
@@ -27626,7 +27626,7 @@
           <Option name="pf_limit_table_entries">0</Option>
           <Option name="pf_limit_tables">0</Option>
           <Option name="pf_modulate_state">False</Option>
-          <Option name="pf_optimization"/>
+          <Option name="pf_optimization"></Option>
           <Option name="pf_other_first">0</Option>
           <Option name="pf_other_multiple">0</Option>
           <Option name="pf_other_single">0</Option>
@@ -27655,7 +27655,7 @@
           <Option name="pf_set_udp_first">False</Option>
           <Option name="pf_set_udp_multiple">False</Option>
           <Option name="pf_set_udp_single">False</Option>
-          <Option name="pf_state_policy"/>
+          <Option name="pf_state_policy"></Option>
           <Option name="pf_tcp_closed">0</Option>
           <Option name="pf_tcp_closing">0</Option>
           <Option name="pf_tcp_established">0</Option>
@@ -27669,20 +27669,368 @@
           <Option name="pf_udp_single">0</Option>
           <Option name="platform">iptables</Option>
           <Option name="prolog_place">fw_file</Option>
-          <Option name="prolog_script"/>
+          <Option name="prolog_script"></Option>
           <Option name="proxy_arp">False</Option>
-          <Option name="scpArgs"/>
-          <Option name="script_env_path"/>
-          <Option name="script_name_on_firewall"/>
-          <Option name="snmp_contact"/>
-          <Option name="snmp_description"/>
-          <Option name="snmp_location"/>
-          <Option name="sshArgs"/>
+          <Option name="scpArgs"></Option>
+          <Option name="script_env_path"></Option>
+          <Option name="script_name_on_firewall"></Option>
+          <Option name="snmp_contact"></Option>
+          <Option name="snmp_description"></Option>
+          <Option name="snmp_location"></Option>
+          <Option name="sshArgs"></Option>
           <Option name="use_ip_tool">False</Option>
           <Option name="use_numeric_log_levels">False</Option>
           <Option name="use_tables">True</Option>
         </FirewallOptions>
       </Firewall>
+      <Firewall id="id145440X24525" host_OS="openbsd" inactive="False" lastCompiled="1157930816" lastInstalled="0" lastModified="1309899485" platform="pf" version="4.7" name="firewall40-2" comment="testing Route action for PF v4.7 and later&#10;&#10;" ro="False">
+        <NAT id="id145640X24525" name="NAT" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="True">
+          <NATRule id="id145642X24525" disabled="False" group="" position="0" action="Translate" comment="Translate source address&#10;for outgoing connections">
+            <OSrc neg="False">
+              <ObjectRef ref="id3DC75CE7-1"/>
+            </OSrc>
+            <ODst neg="False">
+              <ObjectRef ref="sysid0"/>
+            </ODst>
+            <OSrv neg="False">
+              <ServiceRef ref="sysid1"/>
+            </OSrv>
+            <TSrc neg="False">
+              <ObjectRef ref="id145448X24525"/>
+            </TSrc>
+            <TDst neg="False">
+              <ObjectRef ref="sysid0"/>
+            </TDst>
+            <TSrv neg="False">
+              <ServiceRef ref="sysid1"/>
+            </TSrv>
+            <ItfInb neg="False">
+              <ObjectRef ref="sysid0"/>
+            </ItfInb>
+            <ItfOutb neg="False">
+              <ObjectRef ref="sysid0"/>
+            </ItfOutb>
+            <NATRuleOptions/>
+          </NATRule>
+          <NATRule id="id145685X24525" disabled="False" group="" position="1" action="Translate" comment="Translate source address&#10;for outgoing connections">
+            <OSrc neg="False">
+              <ObjectRef ref="id3DC75CE7-1"/>
+            </OSrc>
+            <ODst neg="False">
+              <ObjectRef ref="sysid0"/>
+            </ODst>
+            <OSrv neg="False">
+              <ServiceRef ref="sysid1"/>
+            </OSrv>
+            <TSrc neg="False">
+              <ObjectRef ref="id145463X24525"/>
+            </TSrc>
+            <TDst neg="False">
+              <ObjectRef ref="sysid0"/>
+            </TDst>
+            <TSrv neg="False">
+              <ServiceRef ref="sysid1"/>
+            </TSrv>
+            <ItfInb neg="False">
+              <ObjectRef ref="sysid0"/>
+            </ItfInb>
+            <ItfOutb neg="False">
+              <ObjectRef ref="sysid0"/>
+            </ItfOutb>
+            <NATRuleOptions/>
+          </NATRule>
+          <RuleSetOptions/>
+        </NAT>
+        <Policy id="id145468X24525" name="Policy" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="True">
+          <PolicyRule id="id145526X24525" disabled="False" group="" log="False" position="0" action="Accept" direction="Inbound" comment="">
+            <Src neg="False">
+              <ObjectRef ref="id3DC75CE7-1"/>
+            </Src>
+            <Dst neg="False">
+              <ObjectRef ref="sysid0"/>
+            </Dst>
+            <Srv neg="False">
+              <ServiceRef ref="tcp-HTTP"/>
+              <ServiceRef ref="tcp-SMTP"/>
+            </Srv>
+            <Itf neg="False">
+              <ObjectRef ref="id145453X24525"/>
+            </Itf>
+            <When neg="False">
+              <IntervalRef ref="sysid2"/>
+            </When>
+            <PolicyRuleOptions>
+              <Option name="action_on_reject"></Option>
+              <Option name="branch_anchor_name"></Option>
+              <Option name="branch_chain_name"></Option>
+              <Option name="classification">False</Option>
+              <Option name="classify_str"></Option>
+              <Option name="custom_str"></Option>
+              <Option name="ipf_route_opt_addr"></Option>
+              <Option name="ipf_route_opt_if"></Option>
+              <Option name="ipf_route_option">route_through</Option>
+              <Option name="ipfw_classify_method">2</Option>
+              <Option name="ipfw_pipe_port_num">0</Option>
+              <Option name="ipfw_pipe_queue_num">0</Option>
+              <Option name="ipt_continue">False</Option>
+              <Option name="ipt_gw"></Option>
+              <Option name="ipt_iif"></Option>
+              <Option name="ipt_mark_connections">False</Option>
+              <Option name="ipt_oif"></Option>
+              <Option name="ipt_tee">False</Option>
+              <Option name="pf_classify_str"></Option>
+              <Option name="pf_fastroute">False</Option>
+              <Option name="pf_route_opt_addr">192.0.2.10</Option>
+              <Option name="pf_route_opt_if">le1</Option>
+              <Option name="pf_route_option">route_through</Option>
+              <Option name="routing">True</Option>
+              <Option name="rule_name_accounting"></Option>
+              <Option name="stateless">True</Option>
+              <Option name="tagging">False</Option>
+            </PolicyRuleOptions>
+          </PolicyRule>
+          <PolicyRule id="id145555X24525" disabled="False" group="" log="False" position="1" action="Accept" direction="Inbound" comment="">
+            <Src neg="False">
+              <ObjectRef ref="id3DC75CE7-1"/>
+            </Src>
+            <Dst neg="False">
+              <ObjectRef ref="sysid0"/>
+            </Dst>
+            <Srv neg="False">
+              <ServiceRef ref="tcp-SSH"/>
+            </Srv>
+            <Itf neg="False">
+              <ObjectRef ref="id145453X24525"/>
+            </Itf>
+            <When neg="False">
+              <IntervalRef ref="sysid2"/>
+            </When>
+            <PolicyRuleOptions>
+              <Option name="action_on_reject"></Option>
+              <Option name="branch_anchor_name"></Option>
+              <Option name="branch_chain_name"></Option>
+              <Option name="classification">False</Option>
+              <Option name="classify_str"></Option>
+              <Option name="custom_str"></Option>
+              <Option name="ipf_route_opt_addr"></Option>
+              <Option name="ipf_route_opt_if"></Option>
+              <Option name="ipf_route_option">route_through</Option>
+              <Option name="ipfw_classify_method">2</Option>
+              <Option name="ipfw_pipe_port_num">0</Option>
+              <Option name="ipfw_pipe_queue_num">0</Option>
+              <Option name="ipt_continue">False</Option>
+              <Option name="ipt_gw"></Option>
+              <Option name="ipt_iif"></Option>
+              <Option name="ipt_mark_connections">False</Option>
+              <Option name="ipt_oif"></Option>
+              <Option name="ipt_tee">False</Option>
+              <Option name="pf_classify_str"></Option>
+              <Option name="pf_fastroute">False</Option>
+              <Option name="pf_route_opt_addr">192.0.3.10</Option>
+              <Option name="pf_route_opt_if">le2</Option>
+              <Option name="pf_route_option">route_through</Option>
+              <Option name="routing">True</Option>
+              <Option name="rule_name_accounting"></Option>
+              <Option name="stateless">True</Option>
+              <Option name="tagging">False</Option>
+            </PolicyRuleOptions>
+          </PolicyRule>
+          <PolicyRule id="id356123X24525" disabled="False" group="" log="False" position="2" action="Accept" direction="Inbound" comment="">
+            <Src neg="False">
+              <ObjectRef ref="id3DC75CE7-1"/>
+            </Src>
+            <Dst neg="False">
+              <ObjectRef ref="sysid0"/>
+            </Dst>
+            <Srv neg="False">
+              <ServiceRef ref="tcp-SSH"/>
+            </Srv>
+            <Itf neg="False">
+              <ObjectRef ref="id145453X24525"/>
+            </Itf>
+            <When neg="False">
+              <IntervalRef ref="sysid2"/>
+            </When>
+            <PolicyRuleOptions>
+              <Option name="action_on_reject"></Option>
+              <Option name="branch_anchor_name"></Option>
+              <Option name="branch_chain_name"></Option>
+              <Option name="classification">False</Option>
+              <Option name="classify_str"></Option>
+              <Option name="custom_str"></Option>
+              <Option name="ipf_route_opt_addr"></Option>
+              <Option name="ipf_route_opt_if"></Option>
+              <Option name="ipf_route_option">route_through</Option>
+              <Option name="ipfw_classify_method">2</Option>
+              <Option name="ipfw_pipe_port_num">0</Option>
+              <Option name="ipfw_pipe_queue_num">0</Option>
+              <Option name="ipt_continue">False</Option>
+              <Option name="ipt_gw"></Option>
+              <Option name="ipt_iif"></Option>
+              <Option name="ipt_mark_connections">False</Option>
+              <Option name="ipt_oif"></Option>
+              <Option name="ipt_tee">False</Option>
+              <Option name="log_prefix"></Option>
+              <Option name="pf_classify_str"></Option>
+              <Option name="pf_fastroute">False</Option>
+              <Option name="pf_keep_state">False</Option>
+              <Option name="pf_max_src_conn">0</Option>
+              <Option name="pf_max_src_conn_flush">False</Option>
+              <Option name="pf_max_src_conn_global">False</Option>
+              <Option name="pf_max_src_conn_overload_table"></Option>
+              <Option name="pf_max_src_conn_rate_num">0</Option>
+              <Option name="pf_max_src_conn_rate_seconds">0</Option>
+              <Option name="pf_max_src_nodes">0</Option>
+              <Option name="pf_max_src_states">0</Option>
+              <Option name="pf_modulate_state">False</Option>
+              <Option name="pf_no_sync">False</Option>
+              <Option name="pf_pflow">False</Option>
+              <Option name="pf_route_load_option">none</Option>
+              <Option name="pf_route_opt_addr">192.0.3.10</Option>
+              <Option name="pf_route_opt_if">le2</Option>
+              <Option name="pf_route_option">route_through</Option>
+              <Option name="pf_rule_max_state">0</Option>
+              <Option name="pf_sloppy_tracker">False</Option>
+              <Option name="pf_source_tracking">False</Option>
+              <Option name="pf_synproxy">False</Option>
+              <Option name="routing">True</Option>
+              <Option name="rule_name_accounting"></Option>
+              <Option name="stateless">False</Option>
+              <Option name="tagging">False</Option>
+              <Option name="tagobject_id"></Option>
+            </PolicyRuleOptions>
+          </PolicyRule>
+          <RuleSetOptions/>
+        </Policy>
+        <Routing id="id145729X24525" name="Routing" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="True">
+          <RuleSetOptions/>
+        </Routing>
+        <Interface id="id145448X24525" dedicated_failover="False" dyn="False" label="" mgmt="False" security_level="0" unnum="False" unprotected="False" name="le1" comment="" ro="False">
+          <IPv4 id="id145451X24525" name="firewall40:le1:ip" comment="This is a test address, change it to your real one" ro="False" address="192.0.2.1" netmask="255.255.255.0"/>
+          <InterfaceOptions/>
+        </Interface>
+        <Interface id="id145453X24525" dedicated_failover="False" dyn="False" label="" mgmt="True" security_level="100" unnum="False" unprotected="False" name="fxp0" comment="" ro="False">
+          <IPv4 id="id145456X24525" name="firewall40:fxp0:ip" comment="" ro="False" address="192.168.1.1" netmask="255.255.255.0"/>
+          <InterfaceOptions/>
+        </Interface>
+        <Interface id="id145458X24525" dedicated_failover="False" dyn="False" label="" mgmt="False" security_level="100" unnum="False" unprotected="False" name="lo0" comment="" ro="False">
+          <IPv4 id="id145461X24525" name="firewall40:lo0:ip" comment="" ro="False" address="127.0.0.1" netmask="255.0.0.0"/>
+          <InterfaceOptions/>
+        </Interface>
+        <Interface id="id145463X24525" dedicated_failover="False" dyn="False" label="" mgmt="False" security_level="0" unnum="False" unprotected="False" name="le2" comment="" ro="False">
+          <IPv4 id="id145466X24525" name="firewall40:le2:ip" comment="" ro="False" address="192.0.3.1" netmask="255.255.255.0"/>
+          <InterfaceOptions/>
+        </Interface>
+        <Management address="0.0.0.0">
+          <SNMPManagement enabled="False" snmp_read_community="" snmp_write_community=""/>
+          <FWBDManagement enabled="False" identity="" port="-1"/>
+          <PolicyInstallScript arguments="" command="" enabled="False"/>
+        </Management>
+        <FirewallOptions>
+          <Option name="accept_established">true</Option>
+          <Option name="accept_new_tcp_with_no_syn">True</Option>
+          <Option name="activationCmd"></Option>
+          <Option name="admUser"></Option>
+          <Option name="altAddress"></Option>
+          <Option name="check_shading">True</Option>
+          <Option name="cmdline"></Option>
+          <Option name="compiler"></Option>
+          <Option name="configure_interfaces">True</Option>
+          <Option name="debug">False</Option>
+          <Option name="eliminate_duplicates">true</Option>
+          <Option name="epilog_script"></Option>
+          <Option name="fallback_log">False</Option>
+          <Option name="firewall_dir">/etc</Option>
+          <Option name="firewall_is_part_of_any_and_networks">true</Option>
+          <Option name="freebsd_ip_forward">1</Option>
+          <Option name="ignore_empty_groups">False</Option>
+          <Option name="in_out_code">True</Option>
+          <Option name="limit_value">0</Option>
+          <Option name="linux24_ip_forward">1</Option>
+          <Option name="load_modules">true</Option>
+          <Option name="local_nat">false</Option>
+          <Option name="log_level">info</Option>
+          <Option name="log_prefix">RULE %N -- %A </Option>
+          <Option name="loopback_interface">lo0</Option>
+          <Option name="macosx_ip_forward">1</Option>
+          <Option name="manage_virtual_addr">True</Option>
+          <Option name="mgmt_addr"></Option>
+          <Option name="mgmt_ssh">False</Option>
+          <Option name="modulate_state">True</Option>
+          <Option name="openbsd_ip_forward">1</Option>
+          <Option name="output_file"></Option>
+          <Option name="pass_all_out">False</Option>
+          <Option name="pf_adaptive_end">0</Option>
+          <Option name="pf_adaptive_start">0</Option>
+          <Option name="pf_do_limit_frags">False</Option>
+          <Option name="pf_do_limit_states">False</Option>
+          <Option name="pf_do_scrub">False</Option>
+          <Option name="pf_do_timeout_frag">False</Option>
+          <Option name="pf_do_timeout_interval">False</Option>
+          <Option name="pf_icmp_error">0</Option>
+          <Option name="pf_icmp_first">0</Option>
+          <Option name="pf_limit_frags">5000</Option>
+          <Option name="pf_limit_states">10000</Option>
+          <Option name="pf_optimization"></Option>
+          <Option name="pf_other_first">0</Option>
+          <Option name="pf_other_multiple">0</Option>
+          <Option name="pf_other_single">0</Option>
+          <Option name="pf_scrub_fragm_crop">False</Option>
+          <Option name="pf_scrub_fragm_drop_ovl">False</Option>
+          <Option name="pf_scrub_maxmss">1460</Option>
+          <Option name="pf_scrub_minttl">0</Option>
+          <Option name="pf_scrub_no_df">False</Option>
+          <Option name="pf_scrub_random_id">False</Option>
+          <Option name="pf_scrub_reassemble">True</Option>
+          <Option name="pf_scrub_use_maxmss">False</Option>
+          <Option name="pf_scrub_use_minttl">False</Option>
+          <Option name="pf_set_adaptive">False</Option>
+          <Option name="pf_set_icmp_error">False</Option>
+          <Option name="pf_set_icmp_first">False</Option>
+          <Option name="pf_set_other_first">False</Option>
+          <Option name="pf_set_other_multiple">False</Option>
+          <Option name="pf_set_other_single">False</Option>
+          <Option name="pf_set_tcp_closed">False</Option>
+          <Option name="pf_set_tcp_closing">False</Option>
+          <Option name="pf_set_tcp_established">False</Option>
+          <Option name="pf_set_tcp_finwait">False</Option>
+          <Option name="pf_set_tcp_first">False</Option>
+          <Option name="pf_set_tcp_opening">False</Option>
+          <Option name="pf_set_udp_first">False</Option>
+          <Option name="pf_set_udp_multiple">False</Option>
+          <Option name="pf_set_udp_single">False</Option>
+          <Option name="pf_tcp_closed">0</Option>
+          <Option name="pf_tcp_closing">0</Option>
+          <Option name="pf_tcp_established">0</Option>
+          <Option name="pf_tcp_finwait">0</Option>
+          <Option name="pf_tcp_first">0</Option>
+          <Option name="pf_tcp_opening">0</Option>
+          <Option name="pf_timeout_frag">30</Option>
+          <Option name="pf_timeout_interval">10</Option>
+          <Option name="pf_udp_first">0</Option>
+          <Option name="pf_udp_multiple">0</Option>
+          <Option name="pf_udp_single">0</Option>
+          <Option name="pix_add_clear_statements">true</Option>
+          <Option name="pix_assume_fw_part_of_any">true</Option>
+          <Option name="pix_default_logint">300</Option>
+          <Option name="pix_emblem_log_format">false</Option>
+          <Option name="pix_emulate_out_acl">true</Option>
+          <Option name="pix_floodguard">true</Option>
+          <Option name="pix_include_comments">true</Option>
+          <Option name="pix_route_dnat_supported">true</Option>
+          <Option name="pix_rule_syslog_settings">false</Option>
+          <Option name="pix_security_fragguard_supported">true</Option>
+          <Option name="pix_syslog_device_id_supported">false</Option>
+          <Option name="pix_use_acl_remarks">true</Option>
+          <Option name="prolog_script"></Option>
+          <Option name="prompt1">$ </Option>
+          <Option name="prompt2"> # </Option>
+          <Option name="solaris_ip_forward">1</Option>
+          <Option name="sshArgs"></Option>
+          <Option name="ulog_nlgroup">1</Option>
+          <Option name="verify_interfaces">true</Option>
+        </FirewallOptions>
+      </Firewall>
     </ObjectGroup>
     <IntervalGroup id="stdid11_1" name="Time" comment="" ro="False"/>
   </Library>
@@ -27797,30 +28145,30 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
+              <Option name="action_on_reject"></Option>
               <Option name="classification">False</Option>
-              <Option name="classify_str"/>
-              <Option name="custom_str"/>
-              <Option name="ipf_route_opt_addr"/>
-              <Option name="ipf_route_opt_if"/>
+              <Option name="classify_str"></Option>
+              <Option name="custom_str"></Option>
+              <Option name="ipf_route_opt_addr"></Option>
+              <Option name="ipf_route_opt_if"></Option>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"/>
-              <Option name="ipt_iif"/>
+              <Option name="ipt_gw"></Option>
+              <Option name="ipt_iif"></Option>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"/>
+              <Option name="ipt_oif"></Option>
               <Option name="ipt_tee">False</Option>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"/>
-              <Option name="pf_route_opt_if"/>
+              <Option name="pf_route_opt_addr"></Option>
+              <Option name="pf_route_opt_if"></Option>
               <Option name="pf_route_option">route_through</Option>
               <Option name="routing">False</Option>
-              <Option name="rule_name_accounting"/>
+              <Option name="rule_name_accounting"></Option>
               <Option name="stateless">False</Option>
               <Option name="tagging">True</Option>
               <Option name="tagobject_id">id4847247323126</Option>
@@ -27844,7 +28192,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -27866,7 +28214,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -27887,7 +28235,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id445E76C726850" disabled="False" group="" log="False" position="4" action="Branch" direction="Inbound" comment="">
@@ -27909,7 +28257,7 @@
             <PolicyRuleOptions>
               <Option name="branch_name">rule3_branch</Option>
               <Option name="color">#C0BA44</Option>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -27932,7 +28280,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id3AF5A757" disabled="False" group="" log="False" position="6" action="Accept" direction="Both" comment="allow all outgoing connections">
@@ -27953,7 +28301,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id3AF5A762" disabled="False" group="" log="True" position="7" action="Deny" direction="Both" comment="'catch all' rule">
@@ -27973,7 +28321,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -27997,7 +28345,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -28025,7 +28373,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <RuleSetOptions/>
@@ -28054,26 +28402,26 @@
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
           <Option name="action_on_reject">ICMP host prohibited</Option>
-          <Option name="activationCmd"/>
+          <Option name="activationCmd"></Option>
           <Option name="admUser">root</Option>
           <Option name="altAddress">labfw</Option>
           <Option name="check_shading">True</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
-          <Option name="cmdline"/>
-          <Option name="compiler"/>
+          <Option name="cmdline"></Option>
+          <Option name="compiler"></Option>
           <Option name="configure_interfaces">False</Option>
           <Option name="debug">False</Option>
           <Option name="dyn_addr">False</Option>
-          <Option name="epilog_script"/>
+          <Option name="epilog_script"></Option>
           <Option name="fallback_log">False</Option>
           <Option name="firewall_dir">/etc/fw</Option>
           <Option name="firewall_is_part_of_any">True</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="ignore_empty_groups">False</Option>
           <Option name="in_out_code">True</Option>
-          <Option name="inst_cmdline"/>
-          <Option name="inst_script"/>
-          <Option name="install_script"/>
+          <Option name="inst_cmdline"></Option>
+          <Option name="inst_script"></Option>
+          <Option name="install_script"></Option>
           <Option name="limit_suffix">/day</Option>
           <Option name="limit_value">0</Option>
           <Option name="linux24_ip_forward">0</Option>
@@ -28083,9 +28431,9 @@
           <Option name="log_all_dropped">False</Option>
           <Option name="log_ip_opt">False</Option>
           <Option name="log_level">debug</Option>
-          <Option name="log_limit_suffix"/>
+          <Option name="log_limit_suffix"></Option>
           <Option name="log_limit_value">0</Option>
-          <Option name="log_prefix"/>
+          <Option name="log_prefix"></Option>
           <Option name="log_tcp_opt">False</Option>
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">False</Option>
@@ -28094,13 +28442,13 @@
           <Option name="modulate_state">False</Option>
           <Option name="no_iochains_for_any">False</Option>
           <Option name="no_optimisation">False</Option>
-          <Option name="openbsd_ip_directed_broadcast"/>
+          <Option name="openbsd_ip_directed_broadcast"></Option>
           <Option name="openbsd_ip_forward">1</Option>
-          <Option name="openbsd_ip_redirect"/>
-          <Option name="openbsd_ip_sourceroute"/>
-          <Option name="openbsd_path_pfctl"/>
-          <Option name="openbsd_path_sysctl"/>
-          <Option name="output_file"/>
+          <Option name="openbsd_ip_redirect"></Option>
+          <Option name="openbsd_ip_sourceroute"></Option>
+          <Option name="openbsd_path_pfctl"></Option>
+          <Option name="openbsd_path_sysctl"></Option>
+          <Option name="output_file"></Option>
           <Option name="pass_all_out">False</Option>
           <Option name="pf_adaptive_end">0</Option>
           <Option name="pf_adaptive_start">0</Option>
@@ -28113,7 +28461,7 @@
           <Option name="pf_icmp_first">0</Option>
           <Option name="pf_limit_frags">5000</Option>
           <Option name="pf_limit_states">10000</Option>
-          <Option name="pf_optimization"/>
+          <Option name="pf_optimization"></Option>
           <Option name="pf_other_first">0</Option>
           <Option name="pf_other_multiple">0</Option>
           <Option name="pf_other_single">0</Option>
@@ -28154,12 +28502,12 @@
           <Option name="pf_udp_single">0</Option>
           <Option name="platform">iptables</Option>
           <Option name="prolog_place">fw_file</Option>
-          <Option name="prolog_script"/>
-          <Option name="script_env_path"/>
-          <Option name="snmp_contact"/>
-          <Option name="snmp_description"/>
-          <Option name="snmp_location"/>
-          <Option name="sshArgs"/>
+          <Option name="prolog_script"></Option>
+          <Option name="script_env_path"></Option>
+          <Option name="snmp_contact"></Option>
+          <Option name="snmp_description"></Option>
+          <Option name="snmp_location"></Option>
+          <Option name="sshArgs"></Option>
           <Option name="use_ip_tool">False</Option>
           <Option name="use_numeric_log_levels">False</Option>
           <Option name="use_tables">True</Option>
@@ -28215,7 +28563,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -28237,7 +28585,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -28258,7 +28606,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id42B5D902" disabled="False" group="" log="True" position="3" action="Deny" direction="Both" comment="block fragments">
@@ -28278,7 +28626,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -28299,7 +28647,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id42B612DC" disabled="False" group="" log="False" position="5" action="Accept" direction="Both" comment="allow all outgoing connections">
@@ -28319,7 +28667,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id42B5D934" disabled="False" group="" log="True" position="6" action="Deny" direction="Both" comment="'catch all' rule">
@@ -28339,7 +28687,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -28369,33 +28717,33 @@
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
           <Option name="action_on_reject">ICMP host prohibited</Option>
-          <Option name="activationCmd"/>
+          <Option name="activationCmd"></Option>
           <Option name="admUser">root</Option>
           <Option name="altAddress">10.3.14.121</Option>
           <Option name="check_shading">True</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
-          <Option name="cmdline"/>
-          <Option name="compiler"/>
+          <Option name="cmdline"></Option>
+          <Option name="compiler"></Option>
           <Option name="configure_interfaces">False</Option>
           <Option name="debug">False</Option>
           <Option name="dyn_addr">False</Option>
-          <Option name="epilog_script"/>
+          <Option name="epilog_script"></Option>
           <Option name="fallback_log">False</Option>
           <Option name="firewall_dir">/etc/fw</Option>
           <Option name="firewall_is_part_of_any">True</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="freebsd_ip_forward">1</Option>
-          <Option name="freebsd_ip_redirect"/>
-          <Option name="freebsd_ip_sourceroute"/>
-          <Option name="freebsd_path_ipf"/>
-          <Option name="freebsd_path_ipfw"/>
-          <Option name="freebsd_path_ipnat"/>
-          <Option name="freebsd_path_sysctl"/>
+          <Option name="freebsd_ip_redirect"></Option>
+          <Option name="freebsd_ip_sourceroute"></Option>
+          <Option name="freebsd_path_ipf"></Option>
+          <Option name="freebsd_path_ipfw"></Option>
+          <Option name="freebsd_path_ipnat"></Option>
+          <Option name="freebsd_path_sysctl"></Option>
           <Option name="ignore_empty_groups">False</Option>
           <Option name="in_out_code">True</Option>
-          <Option name="inst_cmdline"/>
-          <Option name="inst_script"/>
-          <Option name="install_script"/>
+          <Option name="inst_cmdline"></Option>
+          <Option name="inst_script"></Option>
+          <Option name="install_script"></Option>
           <Option name="limit_suffix">/day</Option>
           <Option name="limit_value">0</Option>
           <Option name="linux24_ip_forward">0</Option>
@@ -28405,9 +28753,9 @@
           <Option name="log_all_dropped">False</Option>
           <Option name="log_ip_opt">False</Option>
           <Option name="log_level">debug</Option>
-          <Option name="log_limit_suffix"/>
+          <Option name="log_limit_suffix"></Option>
           <Option name="log_limit_value">0</Option>
-          <Option name="log_prefix"/>
+          <Option name="log_prefix"></Option>
           <Option name="log_tcp_opt">False</Option>
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">False</Option>
@@ -28416,13 +28764,13 @@
           <Option name="modulate_state">False</Option>
           <Option name="no_iochains_for_any">False</Option>
           <Option name="no_optimisation">False</Option>
-          <Option name="openbsd_ip_directed_broadcast"/>
+          <Option name="openbsd_ip_directed_broadcast"></Option>
           <Option name="openbsd_ip_forward">1</Option>
-          <Option name="openbsd_ip_redirect"/>
-          <Option name="openbsd_ip_sourceroute"/>
-          <Option name="openbsd_path_pfctl"/>
-          <Option name="openbsd_path_sysctl"/>
-          <Option name="output_file"/>
+          <Option name="openbsd_ip_redirect"></Option>
+          <Option name="openbsd_ip_sourceroute"></Option>
+          <Option name="openbsd_path_pfctl"></Option>
+          <Option name="openbsd_path_sysctl"></Option>
+          <Option name="output_file"></Option>
           <Option name="pass_all_out">False</Option>
           <Option name="pf_adaptive_end">0</Option>
           <Option name="pf_adaptive_start">0</Option>
@@ -28435,7 +28783,7 @@
           <Option name="pf_icmp_first">0</Option>
           <Option name="pf_limit_frags">5000</Option>
           <Option name="pf_limit_states">10000</Option>
-          <Option name="pf_optimization"/>
+          <Option name="pf_optimization"></Option>
           <Option name="pf_other_first">0</Option>
           <Option name="pf_other_multiple">0</Option>
           <Option name="pf_other_single">0</Option>
@@ -28475,12 +28823,12 @@
           <Option name="pf_udp_multiple">0</Option>
           <Option name="pf_udp_single">0</Option>
           <Option name="platform">iptables</Option>
-          <Option name="prolog_script"/>
-          <Option name="script_env_path"/>
-          <Option name="snmp_contact"/>
-          <Option name="snmp_description"/>
-          <Option name="snmp_location"/>
-          <Option name="sshArgs"/>
+          <Option name="prolog_script"></Option>
+          <Option name="script_env_path"></Option>
+          <Option name="snmp_contact"></Option>
+          <Option name="snmp_description"></Option>
+          <Option name="snmp_location"></Option>
+          <Option name="sshArgs"></Option>
           <Option name="use_ip_tool">False</Option>
           <Option name="use_numeric_log_levels">False</Option>
           <Option name="use_tables">True</Option>
@@ -28508,7 +28856,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -28529,7 +28877,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -28550,7 +28898,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id45DE9C882560" disabled="False" group="" log="False" position="3" action="Branch" direction="Inbound" comment="">
@@ -28572,7 +28920,7 @@
             <PolicyRuleOptions>
               <Option name="branch_name">rule3_branch</Option>
               <Option name="color">#C0BA44</Option>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -28593,7 +28941,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id45DE9CCF2560" disabled="False" group="" log="True" position="5" action="Deny" direction="Both" comment="'catch all' rule">
@@ -28613,7 +28961,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -28637,7 +28985,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -28665,7 +29013,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <RuleSetOptions/>
@@ -28690,26 +29038,26 @@
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
           <Option name="action_on_reject">ICMP host prohibited</Option>
-          <Option name="activationCmd"/>
+          <Option name="activationCmd"></Option>
           <Option name="admUser">root</Option>
-          <Option name="altAddress"/>
+          <Option name="altAddress"></Option>
           <Option name="check_shading">True</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
-          <Option name="cmdline"/>
-          <Option name="compiler"/>
+          <Option name="cmdline"></Option>
+          <Option name="compiler"></Option>
           <Option name="configure_interfaces">False</Option>
           <Option name="debug">True</Option>
           <Option name="dyn_addr">False</Option>
-          <Option name="epilog_script"/>
+          <Option name="epilog_script"></Option>
           <Option name="fallback_log">False</Option>
           <Option name="firewall_dir">/etc/fw</Option>
           <Option name="firewall_is_part_of_any">True</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="ignore_empty_groups">False</Option>
           <Option name="in_out_code">True</Option>
-          <Option name="inst_cmdline"/>
-          <Option name="inst_script"/>
-          <Option name="install_script"/>
+          <Option name="inst_cmdline"></Option>
+          <Option name="inst_script"></Option>
+          <Option name="install_script"></Option>
           <Option name="limit_suffix">/day</Option>
           <Option name="limit_value">0</Option>
           <Option name="linux24_ip_forward">0</Option>
@@ -28719,9 +29067,9 @@
           <Option name="log_all_dropped">False</Option>
           <Option name="log_ip_opt">False</Option>
           <Option name="log_level">debug</Option>
-          <Option name="log_limit_suffix"/>
+          <Option name="log_limit_suffix"></Option>
           <Option name="log_limit_value">0</Option>
-          <Option name="log_prefix"/>
+          <Option name="log_prefix"></Option>
           <Option name="log_tcp_opt">False</Option>
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">False</Option>
@@ -28730,13 +29078,13 @@
           <Option name="modulate_state">False</Option>
           <Option name="no_iochains_for_any">False</Option>
           <Option name="no_optimisation">False</Option>
-          <Option name="openbsd_ip_directed_broadcast"/>
+          <Option name="openbsd_ip_directed_broadcast"></Option>
           <Option name="openbsd_ip_forward">1</Option>
-          <Option name="openbsd_ip_redirect"/>
-          <Option name="openbsd_ip_sourceroute"/>
-          <Option name="openbsd_path_pfctl"/>
-          <Option name="openbsd_path_sysctl"/>
-          <Option name="output_file"/>
+          <Option name="openbsd_ip_redirect"></Option>
+          <Option name="openbsd_ip_sourceroute"></Option>
+          <Option name="openbsd_path_pfctl"></Option>
+          <Option name="openbsd_path_sysctl"></Option>
+          <Option name="output_file"></Option>
           <Option name="pass_all_out">False</Option>
           <Option name="pf_adaptive_end">0</Option>
           <Option name="pf_adaptive_start">0</Option>
@@ -28749,7 +29097,7 @@
           <Option name="pf_icmp_first">0</Option>
           <Option name="pf_limit_frags">5000</Option>
           <Option name="pf_limit_states">10000</Option>
-          <Option name="pf_optimization"/>
+          <Option name="pf_optimization"></Option>
           <Option name="pf_other_first">0</Option>
           <Option name="pf_other_multiple">0</Option>
           <Option name="pf_other_single">0</Option>
@@ -28790,12 +29138,12 @@
           <Option name="pf_udp_single">0</Option>
           <Option name="platform">iptables</Option>
           <Option name="prolog_place">fw_file</Option>
-          <Option name="prolog_script"/>
-          <Option name="script_env_path"/>
-          <Option name="snmp_contact"/>
-          <Option name="snmp_description"/>
-          <Option name="snmp_location"/>
-          <Option name="sshArgs"/>
+          <Option name="prolog_script"></Option>
+          <Option name="script_env_path"></Option>
+          <Option name="snmp_contact"></Option>
+          <Option name="snmp_description"></Option>
+          <Option name="snmp_location"></Option>
+          <Option name="sshArgs"></Option>
           <Option name="use_ip_tool">False</Option>
           <Option name="use_numeric_log_levels">False</Option>
           <Option name="use_tables">True</Option>
@@ -28823,7 +29171,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -28844,7 +29192,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -28865,7 +29213,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id47B07CFF19082" disabled="False" group="" log="False" position="3" action="Branch" direction="Inbound" comment="">
@@ -28885,31 +29233,31 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"/>
+              <Option name="action_on_reject"></Option>
               <Option name="branch_id">id47B07D0B19082</Option>
               <Option name="branch_name">rule3_branch</Option>
-              <Option name="classify_str"/>
+              <Option name="classify_str"></Option>
               <Option name="color">#C0BA44</Option>
-              <Option name="custom_str"/>
-              <Option name="ipf_route_opt_addr"/>
-              <Option name="ipf_route_opt_if"/>
+              <Option name="custom_str"></Option>
+              <Option name="ipf_route_opt_addr"></Option>
+              <Option name="ipf_route_opt_if"></Option>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"/>
-              <Option name="ipt_iif"/>
+              <Option name="ipt_gw"></Option>
+              <Option name="ipt_iif"></Option>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"/>
+              <Option name="ipt_oif"></Option>
               <Option name="ipt_tee">False</Option>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"/>
-              <Option name="pf_route_opt_if"/>
+              <Option name="pf_route_opt_addr"></Option>
+              <Option name="pf_route_opt_if"></Option>
               <Option name="pf_route_option">none</Option>
-              <Option name="rule_name_accounting"/>
+              <Option name="rule_name_accounting"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -28930,7 +29278,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id47B07D3719082" disabled="False" group="" log="True" position="5" action="Deny" direction="Both" comment="'catch all' rule">
@@ -28950,7 +29298,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -28974,7 +29322,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -29002,7 +29350,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <RuleSetOptions/>
@@ -29027,30 +29375,30 @@
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
           <Option name="action_on_reject">ICMP host prohibited</Option>
-          <Option name="activationCmd"/>
+          <Option name="activationCmd"></Option>
           <Option name="admUser">root</Option>
-          <Option name="altAddress"/>
+          <Option name="altAddress"></Option>
           <Option name="check_shading">True</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
-          <Option name="cmdline"/>
-          <Option name="compiler"/>
-          <Option name="conf_file_name_on_firewall"/>
+          <Option name="cmdline"></Option>
+          <Option name="compiler"></Option>
+          <Option name="conf_file_name_on_firewall"></Option>
           <Option name="configure_carp_interfaces">False</Option>
           <Option name="configure_interfaces">False</Option>
           <Option name="configure_pfsync_interfaces">False</Option>
           <Option name="configure_vlan_interfaces">False</Option>
           <Option name="debug">False</Option>
           <Option name="dyn_addr">False</Option>
-          <Option name="epilog_script"/>
+          <Option name="epilog_script"></Option>
           <Option name="fallback_log">False</Option>
           <Option name="firewall_dir">/etc/fw</Option>
           <Option name="firewall_is_part_of_any">True</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="ignore_empty_groups">False</Option>
           <Option name="in_out_code">True</Option>
-          <Option name="inst_cmdline"/>
-          <Option name="inst_script"/>
-          <Option name="install_script"/>
+          <Option name="inst_cmdline"></Option>
+          <Option name="inst_script"></Option>
+          <Option name="install_script"></Option>
           <Option name="ipv4_6_order">ipv4_first</Option>
           <Option name="limit_suffix">/day</Option>
           <Option name="limit_value">0</Option>
@@ -29061,9 +29409,9 @@
           <Option name="log_all_dropped">False</Option>
           <Option name="log_ip_opt">False</Option>
           <Option name="log_level">debug</Option>
-          <Option name="log_limit_suffix"/>
+          <Option name="log_limit_suffix"></Option>
           <Option name="log_limit_value">0</Option>
-          <Option name="log_prefix"/>
+          <Option name="log_prefix"></Option>
           <Option name="log_tcp_opt">False</Option>
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">False</Option>
@@ -29072,13 +29420,13 @@
           <Option name="modulate_state">False</Option>
           <Option name="no_iochains_for_any">False</Option>
           <Option name="no_optimisation">False</Option>
-          <Option name="openbsd_ip_directed_broadcast"/>
+          <Option name="openbsd_ip_directed_broadcast"></Option>
           <Option name="openbsd_ip_forward">1</Option>
-          <Option name="openbsd_ip_redirect"/>
-          <Option name="openbsd_ip_sourceroute"/>
-          <Option name="openbsd_path_pfctl"/>
-          <Option name="openbsd_path_sysctl"/>
-          <Option name="output_file"/>
+          <Option name="openbsd_ip_redirect"></Option>
+          <Option name="openbsd_ip_sourceroute"></Option>
+          <Option name="openbsd_path_pfctl"></Option>
+          <Option name="openbsd_path_sysctl"></Option>
+          <Option name="output_file"></Option>
           <Option name="pass_all_out">False</Option>
           <Option name="pf_adaptive_end">0</Option>
           <Option name="pf_adaptive_start">0</Option>
@@ -29099,7 +29447,7 @@
           <Option name="pf_limit_table_entries">0</Option>
           <Option name="pf_limit_tables">0</Option>
           <Option name="pf_modulate_state">False</Option>
-          <Option name="pf_optimization"/>
+          <Option name="pf_optimization"></Option>
           <Option name="pf_other_first">0</Option>
           <Option name="pf_other_multiple">0</Option>
           <Option name="pf_other_single">0</Option>
@@ -29140,14 +29488,14 @@
           <Option name="pf_udp_single">0</Option>
           <Option name="platform">iptables</Option>
           <Option name="prolog_place">fw_file</Option>
-          <Option name="prolog_script"/>
-          <Option name="scpArgs"/>
-          <Option name="script_env_path"/>
-          <Option name="script_name_on_firewall"/>
-          <Option name="snmp_contact"/>
-          <Option name="snmp_description"/>
-          <Option name="snmp_location"/>
-          <Option name="sshArgs"/>
+          <Option name="prolog_script"></Option>
+          <Option name="scpArgs"></Option>
+          <Option name="script_env_path"></Option>
+          <Option name="script_name_on_firewall"></Option>
+          <Option name="snmp_contact"></Option>
+          <Option name="snmp_description"></Option>
+          <Option name="snmp_location"></Option>
+          <Option name="sshArgs"></Option>
           <Option name="use_ip_tool">False</Option>
           <Option name="use_numeric_log_levels">False</Option>
           <Option name="use_tables">True</Option>
@@ -29175,7 +29523,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id15911X59575" disabled="False" group="" log="False" position="1" action="Accept" direction="Inbound" comment="">
@@ -29197,7 +29545,7 @@
             <PolicyRuleOptions>
               <Option name="branch_name">rule3_branch</Option>
               <Option name="color">#C0BA44</Option>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -29218,7 +29566,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -29244,26 +29592,26 @@
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
           <Option name="action_on_reject">ICMP host prohibited</Option>
-          <Option name="activationCmd"/>
+          <Option name="activationCmd"></Option>
           <Option name="admUser">root</Option>
-          <Option name="altAddress"/>
+          <Option name="altAddress"></Option>
           <Option name="check_shading">True</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
-          <Option name="cmdline"/>
-          <Option name="compiler"/>
+          <Option name="cmdline"></Option>
+          <Option name="compiler"></Option>
           <Option name="configure_interfaces">False</Option>
           <Option name="debug">True</Option>
           <Option name="dyn_addr">False</Option>
-          <Option name="epilog_script"/>
+          <Option name="epilog_script"></Option>
           <Option name="fallback_log">False</Option>
           <Option name="firewall_dir">/etc/fw</Option>
           <Option name="firewall_is_part_of_any">True</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="ignore_empty_groups">False</Option>
           <Option name="in_out_code">True</Option>
-          <Option name="inst_cmdline"/>
-          <Option name="inst_script"/>
-          <Option name="install_script"/>
+          <Option name="inst_cmdline"></Option>
+          <Option name="inst_script"></Option>
+          <Option name="install_script"></Option>
           <Option name="ipv4_6_order">ipv4_first</Option>
           <Option name="limit_suffix">/day</Option>
           <Option name="limit_value">0</Option>
@@ -29274,9 +29622,9 @@
           <Option name="log_all_dropped">False</Option>
           <Option name="log_ip_opt">False</Option>
           <Option name="log_level">debug</Option>
-          <Option name="log_limit_suffix"/>
+          <Option name="log_limit_suffix"></Option>
           <Option name="log_limit_value">0</Option>
-          <Option name="log_prefix"/>
+          <Option name="log_prefix"></Option>
           <Option name="log_tcp_opt">False</Option>
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">False</Option>
@@ -29285,13 +29633,13 @@
           <Option name="modulate_state">False</Option>
           <Option name="no_iochains_for_any">False</Option>
           <Option name="no_optimisation">False</Option>
-          <Option name="openbsd_ip_directed_broadcast"/>
+          <Option name="openbsd_ip_directed_broadcast"></Option>
           <Option name="openbsd_ip_forward">1</Option>
-          <Option name="openbsd_ip_redirect"/>
-          <Option name="openbsd_ip_sourceroute"/>
-          <Option name="openbsd_path_pfctl"/>
-          <Option name="openbsd_path_sysctl"/>
-          <Option name="output_file"/>
+          <Option name="openbsd_ip_redirect"></Option>
+          <Option name="openbsd_ip_sourceroute"></Option>
+          <Option name="openbsd_path_pfctl"></Option>
+          <Option name="openbsd_path_sysctl"></Option>
+          <Option name="output_file"></Option>
           <Option name="pass_all_out">False</Option>
           <Option name="pf_adaptive_end">0</Option>
           <Option name="pf_adaptive_start">0</Option>
@@ -29311,7 +29659,7 @@
           <Option name="pf_limit_states">10000</Option>
           <Option name="pf_limit_table_entries">0</Option>
           <Option name="pf_limit_tables">0</Option>
-          <Option name="pf_optimization"/>
+          <Option name="pf_optimization"></Option>
           <Option name="pf_other_first">0</Option>
           <Option name="pf_other_multiple">0</Option>
           <Option name="pf_other_single">0</Option>
@@ -29352,13 +29700,13 @@
           <Option name="pf_udp_single">0</Option>
           <Option name="platform">iptables</Option>
           <Option name="prolog_place">fw_file</Option>
-          <Option name="prolog_script"/>
-          <Option name="scpArgs"/>
-          <Option name="script_env_path"/>
-          <Option name="snmp_contact"/>
-          <Option name="snmp_description"/>
-          <Option name="snmp_location"/>
-          <Option name="sshArgs"/>
+          <Option name="prolog_script"></Option>
+          <Option name="scpArgs"></Option>
+          <Option name="script_env_path"></Option>
+          <Option name="snmp_contact"></Option>
+          <Option name="snmp_description"></Option>
+          <Option name="snmp_location"></Option>
+          <Option name="sshArgs"></Option>
           <Option name="use_ip_tool">False</Option>
           <Option name="use_numeric_log_levels">False</Option>
           <Option name="use_tables">True</Option>
@@ -29520,7 +29868,7 @@
               <ObjectRef ref="id81513X3490"/>
             </Itf>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -29541,7 +29889,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -29562,7 +29910,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -29599,19 +29947,19 @@
           <Option name="action_on_reject">ICMP net unreachable</Option>
           <Option name="check_shading">True</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
-          <Option name="cmdline"/>
-          <Option name="compiler"/>
+          <Option name="cmdline"></Option>
+          <Option name="compiler"></Option>
           <Option name="configure_interfaces">False</Option>
           <Option name="debug">False</Option>
           <Option name="dyn_addr">False</Option>
-          <Option name="firewall_dir"/>
+          <Option name="firewall_dir"></Option>
           <Option name="firewall_is_part_of_any">True</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="ignore_empty_groups">False</Option>
           <Option name="in_out_code">True</Option>
-          <Option name="inst_cmdline"/>
-          <Option name="inst_script"/>
-          <Option name="install_script"/>
+          <Option name="inst_cmdline"></Option>
+          <Option name="inst_script"></Option>
+          <Option name="install_script"></Option>
           <Option name="limit_suffix">/day</Option>
           <Option name="limit_value">0</Option>
           <Option name="linux24_ip_forward">0</Option>
@@ -29623,20 +29971,20 @@
           <Option name="log_level">debug</Option>
           <Option name="log_limit_suffix">/second</Option>
           <Option name="log_limit_value">0</Option>
-          <Option name="log_prefix"/>
+          <Option name="log_prefix"></Option>
           <Option name="log_tcp_opt">False</Option>
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">True</Option>
           <Option name="modulate_state">False</Option>
           <Option name="no_iochains_for_any">False</Option>
           <Option name="no_optimisation">False</Option>
-          <Option name="openbsd_path_pfctl"/>
-          <Option name="openbsd_path_sysctl"/>
+          <Option name="openbsd_path_pfctl"></Option>
+          <Option name="openbsd_path_sysctl"></Option>
           <Option name="pass_all_out">False</Option>
           <Option name="pf_do_scrub">True</Option>
           <Option name="pf_limit_frags">5000</Option>
           <Option name="pf_limit_states">10000</Option>
-          <Option name="pf_optimization"/>
+          <Option name="pf_optimization"></Option>
           <Option name="pf_scrub_fragm_crop">False</Option>
           <Option name="pf_scrub_fragm_drop_ovl">False</Option>
           <Option name="pf_scrub_maxmss">1460</Option>
@@ -29649,10 +29997,10 @@
           <Option name="pf_timeout_interval">10</Option>
           <Option name="platform">iptables</Option>
           <Option name="proxy_arp">False</Option>
-          <Option name="script_env_path"/>
-          <Option name="snmp_contact"/>
-          <Option name="snmp_description"/>
-          <Option name="snmp_location"/>
+          <Option name="script_env_path"></Option>
+          <Option name="snmp_contact"></Option>
+          <Option name="snmp_description"></Option>
+          <Option name="snmp_location"></Option>
           <Option name="use_ip_tool">False</Option>
           <Option name="use_numeric_log_levels">False</Option>
           <Option name="use_tables">True</Option>
@@ -29713,9 +30061,9 @@
             <PolicyInstallScript arguments="" command="" enabled="False"/>
           </Management>
           <HostOptions>
-            <Option name="snmp_contact"/>
-            <Option name="snmp_description"/>
-            <Option name="snmp_location"/>
+            <Option name="snmp_contact"></Option>
+            <Option name="snmp_description"></Option>
+            <Option name="snmp_location"></Option>
             <Option name="use_mac_addr_filter">False</Option>
           </HostOptions>
         </Host>
@@ -29773,7 +30121,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -29794,7 +30142,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -29815,7 +30163,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -29836,7 +30184,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="pf_classify_str"/>
+              <Option name="pf_classify_str"></Option>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -29867,14 +30215,14 @@
         </Management>
         <FirewallOptions>
           <Option name="check_shading">False</Option>
-          <Option name="cmdline"/>
-          <Option name="compiler"/>
+          <Option name="cmdline"></Option>
+          <Option name="compiler"></Option>
           <Option name="configure_interfaces">False</Option>
           <Option name="debug">False</Option>
           <Option name="firewall_dir">/etc</Option>
           <Option name="ignore_empty_groups">False</Option>
           <Option name="in_out_code">True</Option>
-          <Option name="log_prefix"/>
+          <Option name="log_prefix"></Option>
           <Option name="manage_virtual_addr">False</Option>
           <Option name="modulate_state">False</Option>
           <Option name="no_optimisation">False</Option>
@@ -29885,7 +30233,7 @@
           <Option name="pf_do_scrub">True</Option>
           <Option name="pf_limit_frags">5000</Option>
           <Option name="pf_limit_states">10000</Option>
-          <Option name="pf_optimization"/>
+          <Option name="pf_optimization"></Option>
           <Option name="pf_scrub_fragm_crop">False</Option>
           <Option name="pf_scrub_fragm_drop_ovl">False</Option>
           <Option name="pf_scrub_maxmss">1460</Option>
@@ -29896,9 +30244,9 @@
           <Option name="pf_scrub_use_minttl">False</Option>
           <Option name="pf_timeout_frag">30</Option>
           <Option name="pf_timeout_interval">10</Option>
-          <Option name="snmp_contact"/>
-          <Option name="snmp_description"/>
-          <Option name="snmp_location"/>
+          <Option name="snmp_contact"></Option>
+          <Option name="snmp_description"></Option>
+          <Option name="snmp_location"></Option>
           <Option name="use_tables">True</Option>
         </FirewallOptions>
       </Firewall>
diff --git a/test/pf/pf_cluster_4_rc.conf.local b/test/pf/pf_cluster_4_rc.conf.local
index 33893f45b..286621101 100755
--- a/test/pf/pf_cluster_4_rc.conf.local
+++ b/test/pf/pf_cluster_4_rc.conf.local
@@ -1,9 +1,9 @@
 #
 #  This is automatically generated file. DO NOT MODIFY !
 #
-#  Firewall Builder  fwb_pf v5.0.0.3551
+#  Firewall Builder  fwb_pf v5.0.0.3556
 #
-#  Generated Wed Jun 22 10:50:27 2011 PDT by vadim
+#  Generated Tue Jul  5 13:58:50 2011 PDT by vadim
 #
 # files: * pf_cluster_4_rc.conf.local /etc/pf_cluster_4_rc.conf.local
 # files:   pf_cluster_4_pf.conf /etc/pf_cluster_4_pf.conf