From cf17bb995c14de4fff3cae4ad77563e65cbf90a5 Mon Sep 17 00:00:00 2001
From: Vadim Kurland <vadim@slot.vk.crocodile.org>
Date: Thu, 17 Feb 2011 15:27:37 -0800
Subject: [PATCH] see #2097 showing "interface" columns in iptables NAT ruels

---
 src/libgui/platforms.cpp                  |    62 +-
 src/res/platform/iptables.xml             |     2 +
 test/ipt/cluster-tests.fwb                |  1380 +-
 test/ipt/objects-for-regression-tests.fwb | 13654 +++++++++++---------
 test/ipt/rc.firewall.local                |     4 +-
 5 files changed, 8354 insertions(+), 6748 deletions(-)

diff --git a/src/libgui/platforms.cpp b/src/libgui/platforms.cpp
index 14277f4ee..f5fa3cb1f 100644
--- a/src/libgui/platforms.cpp
+++ b/src/libgui/platforms.cpp
@@ -764,47 +764,55 @@ bool getStatelessFlagForAction(PolicyRule *rule)
  * Returns translatable string - name of the corresponding rule element.
  */
 QString getReadableRuleElementName(const string &platform,
-                                   const string &rule_element_type_name)
+                                   const string &re_type_name)
 {
+    bool nat_intf_in = Resources::getTargetCapabilityBool(
+            platform, "inbound_interface_in_nat");
+    bool nat_intf_out = Resources::getTargetCapabilityBool(
+            platform, "outbound_interface_in_nat");
+
     // The following map TYPENAME of RuleElement classes to readable
     // translatable names.
-    if (rule_element_type_name == "Src") return QObject::tr("Source");
-    if (rule_element_type_name == "Dst") return QObject::tr("Destination");
-    if (rule_element_type_name == "Srv") return QObject::tr("Service");
-    if (rule_element_type_name == "Itf") return QObject::tr("Interface");
-    if (rule_element_type_name == "When") return QObject::tr("Time");
+    if (re_type_name == "Src") return QObject::tr("Source");
+    if (re_type_name == "Dst") return QObject::tr("Destination");
+    if (re_type_name == "Srv") return QObject::tr("Service");
+    if (re_type_name == "Itf") return QObject::tr("Interface");
+    if (re_type_name == "When") return QObject::tr("Time");
 
-    if (rule_element_type_name == "OSrc") return QObject::tr("Original Src");
-    if (rule_element_type_name == "ODst") return QObject::tr("Original Dst");
-    if (rule_element_type_name == "OSrv") return QObject::tr("Original Srv");
+    if (re_type_name == "OSrc") return QObject::tr("Original Src");
+    if (re_type_name == "ODst") return QObject::tr("Original Dst");
+    if (re_type_name == "OSrv") return QObject::tr("Original Srv");
 
-    if (rule_element_type_name == "TSrc") return QObject::tr("Translated Src");
-    if (rule_element_type_name == "TDst") return QObject::tr("Translated Dst");
-    if (rule_element_type_name == "TSrv") return QObject::tr("Translated Srv");
+    if (re_type_name == "TSrc") return QObject::tr("Translated Src");
+    if (re_type_name == "TDst") return QObject::tr("Translated Dst");
+    if (re_type_name == "TSrv") return QObject::tr("Translated Srv");
 
-    if (platform == "pf")
+    if (nat_intf_in != nat_intf_out)
     {
-        // For PF I hide inbound interface and show outbound interface
-        // column with header "Interface"
-        if (rule_element_type_name == "ItfInb") return QObject::tr("Interface");
-        if (rule_element_type_name == "ItfOutb") return QObject::tr("Interface");
+        // For some platforms I only show one interface column in nat
+        // rules, in this case nat_intf_in and nat_intf_out have
+        // different values.  For example, for PF I hide inbound
+        // interface and show outbound interface column. Columns title
+        // should then be just "Interface"
+        if (re_type_name == "ItfInb") return QObject::tr("Interface");
+        if (re_type_name == "ItfOutb") return QObject::tr("Interface");
     } else
     {
-        if (rule_element_type_name == "ItfInb") return QObject::tr("Inbound Interface");
-        if (rule_element_type_name == "ItfOutb") return QObject::tr("Outbound Interface");
+        if (re_type_name == "ItfInb") return QObject::tr("Interface In");
+        if (re_type_name == "ItfOutb") return QObject::tr("Interface Out");
     }
 
-    if (rule_element_type_name == "RDst") return QObject::tr("Destination");
-    if (rule_element_type_name == "RGtw") return QObject::tr("Gateway");
-    if (rule_element_type_name == "RItf") return QObject::tr("Interface");
+    if (re_type_name == "RDst") return QObject::tr("Destination");
+    if (re_type_name == "RGtw") return QObject::tr("Gateway");
+    if (re_type_name == "RItf") return QObject::tr("Interface");
 
     // as of v3.0.x the following are not real rule elements (not separate
     // classes with names) but just attributes of corresponding Rule class.
-    if (rule_element_type_name == "Direction") return QObject::tr("Direction");
-    if (rule_element_type_name == "Action") return QObject::tr("Action");
-    if (rule_element_type_name == "Options") return QObject::tr("Options");
-    if (rule_element_type_name == "Metric") return QObject::tr("Metric");
-    if (rule_element_type_name == "Comment") return QObject::tr("Comment");
+    if (re_type_name == "Direction") return QObject::tr("Direction");
+    if (re_type_name == "Action") return QObject::tr("Action");
+    if (re_type_name == "Options") return QObject::tr("Options");
+    if (re_type_name == "Metric") return QObject::tr("Metric");
+    if (re_type_name == "Comment") return QObject::tr("Comment");
 
     return QString();
 }
diff --git a/src/res/platform/iptables.xml b/src/res/platform/iptables.xml
index f302469d4..1b59a40a4 100644
--- a/src/res/platform/iptables.xml
+++ b/src/res/platform/iptables.xml
@@ -39,6 +39,8 @@
         <options_in_policy>True</options_in_policy>
         <supports_nat>True</supports_nat>
         <actions_in_nat>True</actions_in_nat>
+        <inbound_interface_in_nat>True</inbound_interface_in_nat>
+        <outbound_interface_in_nat>True</outbound_interface_in_nat>
         <supports_time>True</supports_time>
         <supports_accounting>True</supports_accounting>
         <security_levels>False</security_levels>
diff --git a/test/ipt/cluster-tests.fwb b/test/ipt/cluster-tests.fwb
index 15ddfe46f..f1290733d 100644
--- a/test/ipt/cluster-tests.fwb
+++ b/test/ipt/cluster-tests.fwb
@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <!DOCTYPE FWObjectDatabase SYSTEM "fwbuilder.dtd">
-<FWObjectDatabase xmlns="http://www.fwbuilder.org/1.0/" version="17" lastModified="1272731422" id="root">
+<FWObjectDatabase xmlns="http://www.fwbuilder.org/1.0/" version="18" lastModified="1272731422" id="root">
   <Library id="syslib000" color="#d4f8ff" name="Standard" comment="Standard objects" ro="True">
     <AnyNetwork id="sysid0" name="Any" comment="Any Network" ro="False" address="0.0.0.0" netmask="0.0.0.0"/>
     <AnyIPService id="sysid1" protocol_num="0" name="Any" comment="Any IP Service" ro="False"/>
@@ -51,9 +51,9 @@
             <PolicyInstallScript arguments="" command="" enabled="False"/>
           </Management>
           <HostOptions>
-            <Option name="snmp_contact"></Option>
-            <Option name="snmp_description"></Option>
-            <Option name="snmp_location"></Option>
+            <Option name="snmp_contact"/>
+            <Option name="snmp_description"/>
+            <Option name="snmp_location"/>
             <Option name="use_mac_addr">false</Option>
             <Option name="use_mac_addr_filter">False</Option>
           </HostOptions>
@@ -69,9 +69,9 @@
             <PolicyInstallScript arguments="" command="" enabled="False"/>
           </Management>
           <HostOptions>
-            <Option name="snmp_contact"></Option>
-            <Option name="snmp_description"></Option>
-            <Option name="snmp_location"></Option>
+            <Option name="snmp_contact"/>
+            <Option name="snmp_description"/>
+            <Option name="snmp_location"/>
             <Option name="use_mac_addr">false</Option>
             <Option name="use_mac_addr_filter">False</Option>
           </HostOptions>
@@ -100,17 +100,17 @@
     </ObjectGroup>
     <ServiceGroup id="stdid05" name="Services" comment="" ro="False">
       <CustomService id="stdid14_1" name="ESTABLISHED" comment="This service matches all packets which are part of network connections established through the firewall, or connections 'related' to those established through the firewall. Term 'established' refers to the state tracking mechanism which exists inside iptables and other stateful firewalls and does not mean any particular combination of packet header options. Packet is considered to correspond to the state 'ESTABLISHED' if it belongs to the network session, for which proper initiation has been seen by the firewall, so its stateful inspection module made appropriate record in the state table. Usually stateful firewalls keep track of network connections using not only tcp protocol, but also udp and sometimes even icmp protocols. 'RELATED' describes packet belonging to a separate network connection, related to the session firewall is keeping track of. One example is FTP command and FTP data sessions." ro="False" protocol="any" address_family="ipv4">
-        <CustomServiceCommand platform="Undefined"></CustomServiceCommand>
+        <CustomServiceCommand platform="Undefined"/>
         <CustomServiceCommand platform="iosacl">established</CustomServiceCommand>
-        <CustomServiceCommand platform="ipfilter"></CustomServiceCommand>
+        <CustomServiceCommand platform="ipfilter"/>
         <CustomServiceCommand platform="ipfw">established</CustomServiceCommand>
         <CustomServiceCommand platform="iptables">-m state --state ESTABLISHED,RELATED</CustomServiceCommand>
         <CustomServiceCommand platform="procurve_acl">established</CustomServiceCommand>
       </CustomService>
       <CustomService id="stdid14_2" name="ESTABLISHED ipv6" comment="This service matches all packets which are part of network connections established through the firewall, or connections 'related' to those established through the firewall. Term 'established' refers to the state tracking mechanism which exists inside iptables and other stateful firewalls and does not mean any particular combination of packet header options. Packet is considered to correspond to the state 'ESTABLISHED' if it belongs to the network session, for which proper initiation has been seen by the firewall, so its stateful inspection module made appropriate record in the state table. Usually stateful firewalls keep track of network connections using not only tcp protocol, but also udp and sometimes even icmp protocols. 'RELATED' describes packet belonging to a separate network connection, related to the session firewall is keeping track of. One example is FTP command and FTP data sessions." ro="False" protocol="any" address_family="ipv6">
-        <CustomServiceCommand platform="Undefined"></CustomServiceCommand>
+        <CustomServiceCommand platform="Undefined"/>
         <CustomServiceCommand platform="iosacl">established</CustomServiceCommand>
-        <CustomServiceCommand platform="ipfilter"></CustomServiceCommand>
+        <CustomServiceCommand platform="ipfilter"/>
         <CustomServiceCommand platform="ipfw">established</CustomServiceCommand>
         <CustomServiceCommand platform="iptables">-m state --state ESTABLISHED,RELATED</CustomServiceCommand>
         <CustomServiceCommand platform="procurve_acl">established</CustomServiceCommand>
@@ -359,54 +359,54 @@
       </ServiceGroup>
       <ServiceGroup id="stdid13" name="Custom" comment="" ro="False">
         <CustomService id="id3B64EEA8" name="rpc" comment="works in iptables and requires patch-o-matic.&#10;For more information look for patch-o-matic on http://www.netfilter.org/" ro="False" protocol="any" address_family="ipv4">
-          <CustomServiceCommand platform="Undefined"></CustomServiceCommand>
-          <CustomServiceCommand platform="ipf"></CustomServiceCommand>
-          <CustomServiceCommand platform="ipfilter"></CustomServiceCommand>
-          <CustomServiceCommand platform="ipfw"></CustomServiceCommand>
+          <CustomServiceCommand platform="Undefined"/>
+          <CustomServiceCommand platform="ipf"/>
+          <CustomServiceCommand platform="ipfilter"/>
+          <CustomServiceCommand platform="ipfw"/>
           <CustomServiceCommand platform="iptables">-m record_rpc</CustomServiceCommand>
-          <CustomServiceCommand platform="pf"></CustomServiceCommand>
-          <CustomServiceCommand platform="pix"></CustomServiceCommand>
-          <CustomServiceCommand platform="unknown"></CustomServiceCommand>
+          <CustomServiceCommand platform="pf"/>
+          <CustomServiceCommand platform="pix"/>
+          <CustomServiceCommand platform="unknown"/>
         </CustomService>
         <CustomService id="id3B64EF4E" name="irc-conn" comment="IRC connection tracker, supports DCC.&#10;Works on iptables and requires patch-o-matic.&#10;For more information look for patch-o-matic on http://www.netfilter.org/&#10;" ro="False" protocol="any" address_family="ipv4">
-          <CustomServiceCommand platform="Undefined"></CustomServiceCommand>
-          <CustomServiceCommand platform="ipf"></CustomServiceCommand>
-          <CustomServiceCommand platform="ipfilter"></CustomServiceCommand>
-          <CustomServiceCommand platform="ipfw"></CustomServiceCommand>
+          <CustomServiceCommand platform="Undefined"/>
+          <CustomServiceCommand platform="ipf"/>
+          <CustomServiceCommand platform="ipfilter"/>
+          <CustomServiceCommand platform="ipfw"/>
           <CustomServiceCommand platform="iptables">-m irc</CustomServiceCommand>
-          <CustomServiceCommand platform="pf"></CustomServiceCommand>
-          <CustomServiceCommand platform="pix"></CustomServiceCommand>
-          <CustomServiceCommand platform="unknown"></CustomServiceCommand>
+          <CustomServiceCommand platform="pf"/>
+          <CustomServiceCommand platform="pix"/>
+          <CustomServiceCommand platform="unknown"/>
         </CustomService>
         <CustomService id="id3B64EF50" name="psd" comment="Port scan detector, works only on iptables and  requires patch-o-matic &#10;For more information look for patch-o-matic on http://www.netfilter.org/" ro="False" protocol="any" address_family="ipv4">
-          <CustomServiceCommand platform="Undefined"></CustomServiceCommand>
-          <CustomServiceCommand platform="ipf"></CustomServiceCommand>
-          <CustomServiceCommand platform="ipfilter"></CustomServiceCommand>
-          <CustomServiceCommand platform="ipfw"></CustomServiceCommand>
+          <CustomServiceCommand platform="Undefined"/>
+          <CustomServiceCommand platform="ipf"/>
+          <CustomServiceCommand platform="ipfilter"/>
+          <CustomServiceCommand platform="ipfw"/>
           <CustomServiceCommand platform="iptables">-m psd --psd-weight-threshold 5 --psd-delay-threshold 10000</CustomServiceCommand>
-          <CustomServiceCommand platform="pf"></CustomServiceCommand>
-          <CustomServiceCommand platform="pix"></CustomServiceCommand>
-          <CustomServiceCommand platform="unknown"></CustomServiceCommand>
+          <CustomServiceCommand platform="pf"/>
+          <CustomServiceCommand platform="pix"/>
+          <CustomServiceCommand platform="unknown"/>
         </CustomService>
         <CustomService id="id3B64EF52" name="string" comment="Matches a string in a whole packet, works in iptables and requires patch-o-matic.&#10;For more information look for patch-o-matic on http://www.netfilter.org/" ro="False" protocol="any" address_family="ipv4">
-          <CustomServiceCommand platform="Undefined"></CustomServiceCommand>
-          <CustomServiceCommand platform="ipf"></CustomServiceCommand>
-          <CustomServiceCommand platform="ipfilter"></CustomServiceCommand>
-          <CustomServiceCommand platform="ipfw"></CustomServiceCommand>
+          <CustomServiceCommand platform="Undefined"/>
+          <CustomServiceCommand platform="ipf"/>
+          <CustomServiceCommand platform="ipfilter"/>
+          <CustomServiceCommand platform="ipfw"/>
           <CustomServiceCommand platform="iptables">-m string --string test_pattern</CustomServiceCommand>
-          <CustomServiceCommand platform="pf"></CustomServiceCommand>
-          <CustomServiceCommand platform="pix"></CustomServiceCommand>
-          <CustomServiceCommand platform="unknown"></CustomServiceCommand>
+          <CustomServiceCommand platform="pf"/>
+          <CustomServiceCommand platform="pix"/>
+          <CustomServiceCommand platform="unknown"/>
         </CustomService>
         <CustomService id="id3B64EF54" name="talk" comment="Talk protocol support. Works in iptables and requires patch-o-matic.&#10;For more information look for patch-o-matic on http://www.netfilter.org/" ro="False" protocol="any" address_family="ipv4">
-          <CustomServiceCommand platform="Undefined"></CustomServiceCommand>
-          <CustomServiceCommand platform="ipf"></CustomServiceCommand>
-          <CustomServiceCommand platform="ipfilter"></CustomServiceCommand>
-          <CustomServiceCommand platform="ipfw"></CustomServiceCommand>
+          <CustomServiceCommand platform="Undefined"/>
+          <CustomServiceCommand platform="ipf"/>
+          <CustomServiceCommand platform="ipfilter"/>
+          <CustomServiceCommand platform="ipfw"/>
           <CustomServiceCommand platform="iptables">-m talk</CustomServiceCommand>
-          <CustomServiceCommand platform="pf"></CustomServiceCommand>
-          <CustomServiceCommand platform="pix"></CustomServiceCommand>
-          <CustomServiceCommand platform="unknown"></CustomServiceCommand>
+          <CustomServiceCommand platform="pf"/>
+          <CustomServiceCommand platform="pix"/>
+          <CustomServiceCommand platform="unknown"/>
         </CustomService>
       </ServiceGroup>
       <ServiceGroup id="stdid19" name="TagServices" comment="" ro="False"/>
@@ -429,7 +429,7 @@
     <FailoverClusterGroup id="id2719X89830" type="vrrp" name="cluster3:vrrp0:members" comment="">
       <ClusterGroupOptions>
         <Option name="vrrp_secret">vrrp_secret</Option>
-        <Option name="vrrp_vrid"></Option>
+        <Option name="vrrp_vrid"/>
       </ClusterGroupOptions>
     </FailoverClusterGroup>
     <StateSyncClusterGroup id="id2762X92940" type="conntrack" name="State Sync Group-1" comment="">
@@ -447,18 +447,18 @@
         <Option name="iface_disablearp">False</Option>
         <Option name="iface_disableboot">False</Option>
         <Option name="iface_mtu">1500</Option>
-        <Option name="iface_options"></Option>
+        <Option name="iface_options"/>
         <Option name="type">bridge</Option>
-        <Option name="vlan_id"></Option>
+        <Option name="vlan_id"/>
       </InterfaceOptions>
       <Interface id="id10491X48869" dedicated_failover="False" dyn="False" label="" security_level="0" unnum="False" unprotected="False" name="eth2" comment="" ro="False">
         <InterfaceOptions>
           <Option name="iface_disablearp">False</Option>
           <Option name="iface_disableboot">False</Option>
           <Option name="iface_mtu">1500</Option>
-          <Option name="iface_options"></Option>
+          <Option name="iface_options"/>
           <Option name="type">ethernet</Option>
-          <Option name="vlan_id"></Option>
+          <Option name="vlan_id"/>
         </InterfaceOptions>
       </Interface>
       <Interface id="id10493X48869" dedicated_failover="False" dyn="False" label="" security_level="0" unnum="False" unprotected="False" name="eth3" comment="" ro="False">
@@ -495,7 +495,7 @@
         <Option name="iface_disablearp">False</Option>
         <Option name="iface_disableboot">False</Option>
         <Option name="iface_mtu">1500</Option>
-        <Option name="iface_options"></Option>
+        <Option name="iface_options"/>
         <Option name="type">8021q</Option>
         <Option name="vlan_id">100</Option>
       </InterfaceOptions>
@@ -506,7 +506,7 @@
         <Option name="iface_disablearp">False</Option>
         <Option name="iface_disableboot">False</Option>
         <Option name="iface_mtu">1500</Option>
-        <Option name="iface_options"></Option>
+        <Option name="iface_options"/>
         <Option name="type">8021q</Option>
         <Option name="vlan_id">101</Option>
       </InterfaceOptions>
@@ -514,131 +514,149 @@
     <Cluster id="id3631X95766" host_OS="openbsd" inactive="False" lastCompiled="1244758659" lastInstalled="0" lastModified="1244757366" platform="pf" name="pf_cluster_1" comment="" ro="False">
       <NAT id="id3640X95766" name="NAT" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="True">
         <NATRule id="id3162X39764" disabled="False" position="0" action="Translate" comment="">
-          <OSrc neg="False">
+            <OSrc neg="False">
             <ObjectRef ref="id3DC75CE7-1"/>
           </OSrc>
-          <ODst neg="False">
+            <ODst neg="False">
             <ObjectRef ref="sysid0"/>
           </ODst>
-          <OSrv neg="False">
+            <OSrv neg="False">
             <ServiceRef ref="sysid1"/>
           </OSrv>
-          <TSrc neg="False">
+            <TSrc neg="False">
             <ObjectRef ref="sysid0"/>
           </TSrc>
-          <TDst neg="False">
+            <TDst neg="False">
             <ObjectRef ref="sysid0"/>
           </TDst>
-          <TSrv neg="False">
+            <TSrv neg="False">
             <ServiceRef ref="sysid1"/>
           </TSrv>
-          <NATRuleOptions/>
-        </NATRule>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
+            <NATRuleOptions/>
+          </NATRule>
         <NATRule id="id11381X39764" disabled="False" group="" position="1" action="Translate" comment="">
-          <OSrc neg="False">
+            <OSrc neg="False">
             <ObjectRef ref="id3DC75CE7-1"/>
           </OSrc>
-          <ODst neg="False">
+            <ODst neg="False">
             <ObjectRef ref="sysid0"/>
           </ODst>
-          <OSrv neg="False">
+            <OSrv neg="False">
             <ServiceRef ref="sysid1"/>
           </OSrv>
-          <TSrc neg="False">
+            <TSrc neg="False">
             <ObjectRef ref="sysid0"/>
           </TSrc>
-          <TDst neg="False">
+            <TDst neg="False">
             <ObjectRef ref="sysid0"/>
           </TDst>
-          <TSrv neg="False">
+            <TSrv neg="False">
             <ServiceRef ref="sysid1"/>
           </TSrv>
-          <NATRuleOptions/>
-        </NATRule>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
+            <NATRuleOptions/>
+          </NATRule>
         <NATRule id="id11397X39764" disabled="False" group="" position="2" action="Translate" comment="">
-          <OSrc neg="False">
+            <OSrc neg="False">
             <ObjectRef ref="id3DC75CE7-1"/>
           </OSrc>
-          <ODst neg="False">
+            <ODst neg="False">
             <ObjectRef ref="sysid0"/>
           </ODst>
-          <OSrv neg="False">
+            <OSrv neg="False">
             <ServiceRef ref="sysid1"/>
           </OSrv>
-          <TSrc neg="False">
+            <TSrc neg="False">
             <ObjectRef ref="id11417X39764"/>
           </TSrc>
-          <TDst neg="False">
+            <TDst neg="False">
             <ObjectRef ref="sysid0"/>
           </TDst>
-          <TSrv neg="False">
+            <TSrv neg="False">
             <ServiceRef ref="sysid1"/>
           </TSrv>
-          <NATRuleOptions/>
-        </NATRule>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
+            <NATRuleOptions/>
+          </NATRule>
         <NATRule id="id15078X39764" disabled="False" group="" position="3" action="Translate" comment="">
-          <OSrc neg="False">
+            <OSrc neg="False">
             <ObjectRef ref="sysid0"/>
           </OSrc>
-          <ODst neg="False">
+            <ODst neg="False">
             <ObjectRef ref="sysid0"/>
           </ODst>
-          <OSrv neg="False">
+            <OSrv neg="False">
             <ServiceRef ref="tcp-HTTP"/>
           </OSrv>
-          <TSrc neg="False">
+            <TSrc neg="False">
             <ObjectRef ref="sysid0"/>
           </TSrc>
-          <TDst neg="False">
+            <TDst neg="False">
             <ObjectRef ref="id15840X39764"/>
           </TDst>
-          <TSrv neg="False">
+            <TSrv neg="False">
             <ServiceRef ref="sysid1"/>
           </TSrv>
-          <NATRuleOptions/>
-        </NATRule>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
+            <NATRuleOptions/>
+          </NATRule>
         <NATRule id="id16591X39764" disabled="False" group="" position="4" action="Translate" comment="">
-          <OSrc neg="False">
+            <OSrc neg="False">
             <ObjectRef ref="sysid0"/>
           </OSrc>
-          <ODst neg="False">
+            <ODst neg="False">
             <ObjectRef ref="sysid0"/>
           </ODst>
-          <OSrv neg="False">
+            <OSrv neg="False">
             <ServiceRef ref="tcp-HTTP"/>
           </OSrv>
-          <TSrc neg="False">
+            <TSrc neg="False">
             <ObjectRef ref="sysid0"/>
           </TSrc>
-          <TDst neg="False">
+            <TDst neg="False">
             <ObjectRef ref="id15840X39764"/>
           </TDst>
-          <TSrv neg="False">
+            <TSrv neg="False">
             <ServiceRef ref="sysid1"/>
           </TSrv>
-          <NATRuleOptions/>
-        </NATRule>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
+            <NATRuleOptions/>
+          </NATRule>
         <NATRule id="id16611X39764" disabled="False" group="" position="5" action="Translate" comment="">
-          <OSrc neg="False">
+            <OSrc neg="False">
             <ObjectRef ref="sysid0"/>
           </OSrc>
-          <ODst neg="False">
+            <ODst neg="False">
             <ObjectRef ref="id11417X39764"/>
           </ODst>
-          <OSrv neg="False">
+            <OSrv neg="False">
             <ServiceRef ref="tcp-HTTP"/>
           </OSrv>
-          <TSrc neg="False">
+            <TSrc neg="False">
             <ObjectRef ref="sysid0"/>
           </TSrc>
-          <TDst neg="False">
+            <TDst neg="False">
             <ObjectRef ref="id15840X39764"/>
           </TDst>
-          <TSrv neg="False">
+            <TSrv neg="False">
             <ServiceRef ref="sysid1"/>
           </TSrv>
-          <NATRuleOptions/>
-        </NATRule>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
+            <NATRuleOptions/>
+          </NATRule>
         <RuleSetOptions/>
       </NAT>
       <Policy id="id3639X95766" name="Policy" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="True">
@@ -815,18 +833,18 @@
       </Management>
       <FirewallOptions>
         <Option name="accept_new_tcp_with_no_syn">False</Option>
-        <Option name="activationCmd"></Option>
-        <Option name="admUser"></Option>
-        <Option name="altAddress"></Option>
+        <Option name="activationCmd"/>
+        <Option name="admUser"/>
+        <Option name="altAddress"/>
         <Option name="check_shading">False</Option>
-        <Option name="cmdline"></Option>
-        <Option name="compiler"></Option>
+        <Option name="cmdline"/>
+        <Option name="compiler"/>
         <Option name="configure_carp_interfaces">True</Option>
         <Option name="configure_interfaces">True</Option>
         <Option name="configure_pfsync_interfaces">True</Option>
         <Option name="configure_vlan_interfaces">True</Option>
         <Option name="debug">False</Option>
-        <Option name="epilog_script"></Option>
+        <Option name="epilog_script"/>
         <Option name="fallback_log">False</Option>
         <Option name="firewall_dir">/etc</Option>
         <Option name="ignore_empty_groups">False</Option>
@@ -835,11 +853,11 @@
         <Option name="log_prefix">RULE %N -- %A </Option>
         <Option name="loopback_interface">lo0</Option>
         <Option name="manage_virtual_addr">True</Option>
-        <Option name="mgmt_addr"></Option>
+        <Option name="mgmt_addr"/>
         <Option name="mgmt_ssh">False</Option>
         <Option name="modulate_state">False</Option>
         <Option name="openbsd_ip_forward">1</Option>
-        <Option name="output_file"></Option>
+        <Option name="output_file"/>
         <Option name="pass_all_out">false</Option>
         <Option name="pf_adaptive_end">0</Option>
         <Option name="pf_adaptive_start">0</Option>
@@ -859,7 +877,7 @@
         <Option name="pf_limit_states">10000</Option>
         <Option name="pf_limit_table_entries">0</Option>
         <Option name="pf_limit_tables">0</Option>
-        <Option name="pf_optimization"></Option>
+        <Option name="pf_optimization"/>
         <Option name="pf_other_first">0</Option>
         <Option name="pf_other_multiple">0</Option>
         <Option name="pf_other_single">0</Option>
@@ -899,9 +917,9 @@
         <Option name="pf_udp_multiple">0</Option>
         <Option name="pf_udp_single">0</Option>
         <Option name="prolog_place">fw_file</Option>
-        <Option name="prolog_script"></Option>
-        <Option name="scpArgs"></Option>
-        <Option name="sshArgs"></Option>
+        <Option name="prolog_script"/>
+        <Option name="scpArgs"/>
+        <Option name="sshArgs"/>
       </FirewallOptions>
     </Firewall>
     <Firewall id="id3337X26920" host_OS="openbsd" inactive="False" lastCompiled="0" lastInstalled="0" lastModified="1244783399" platform="pf" version="4.x" name="openbsd-2" comment="" ro="False">
@@ -929,18 +947,18 @@
       </Management>
       <FirewallOptions>
         <Option name="accept_new_tcp_with_no_syn">False</Option>
-        <Option name="activationCmd"></Option>
-        <Option name="admUser"></Option>
-        <Option name="altAddress"></Option>
+        <Option name="activationCmd"/>
+        <Option name="admUser"/>
+        <Option name="altAddress"/>
         <Option name="check_shading">False</Option>
-        <Option name="cmdline"></Option>
-        <Option name="compiler"></Option>
+        <Option name="cmdline"/>
+        <Option name="compiler"/>
         <Option name="configure_carp_interfaces">True</Option>
         <Option name="configure_interfaces">True</Option>
         <Option name="configure_pfsync_interfaces">False</Option>
         <Option name="configure_vlan_interfaces">False</Option>
         <Option name="debug">False</Option>
-        <Option name="epilog_script"></Option>
+        <Option name="epilog_script"/>
         <Option name="fallback_log">False</Option>
         <Option name="firewall_dir">/etc</Option>
         <Option name="ignore_empty_groups">False</Option>
@@ -949,11 +967,11 @@
         <Option name="log_prefix">RULE %N -- %A </Option>
         <Option name="loopback_interface">lo0</Option>
         <Option name="manage_virtual_addr">True</Option>
-        <Option name="mgmt_addr"></Option>
+        <Option name="mgmt_addr"/>
         <Option name="mgmt_ssh">False</Option>
         <Option name="modulate_state">False</Option>
         <Option name="openbsd_ip_forward">1</Option>
-        <Option name="output_file"></Option>
+        <Option name="output_file"/>
         <Option name="pass_all_out">false</Option>
         <Option name="pf_adaptive_end">0</Option>
         <Option name="pf_adaptive_start">0</Option>
@@ -973,7 +991,7 @@
         <Option name="pf_limit_states">10000</Option>
         <Option name="pf_limit_table_entries">0</Option>
         <Option name="pf_limit_tables">0</Option>
-        <Option name="pf_optimization"></Option>
+        <Option name="pf_optimization"/>
         <Option name="pf_other_first">0</Option>
         <Option name="pf_other_multiple">0</Option>
         <Option name="pf_other_single">0</Option>
@@ -1013,9 +1031,9 @@
         <Option name="pf_udp_multiple">0</Option>
         <Option name="pf_udp_single">0</Option>
         <Option name="prolog_place">fw_file</Option>
-        <Option name="prolog_script"></Option>
-        <Option name="scpArgs"></Option>
-        <Option name="sshArgs"></Option>
+        <Option name="prolog_script"/>
+        <Option name="scpArgs"/>
+        <Option name="sshArgs"/>
       </FirewallOptions>
     </Firewall>
     <Cluster id="id3867X13237" host_OS="linux24" lastCompiled="0" lastInstalled="0" lastModified="0" platform="iptables" name="vrrp_cluster_2" comment="" ro="False">
@@ -1117,16 +1135,16 @@
             <Option name="hashlimit_mode_dstport">False</Option>
             <Option name="hashlimit_mode_srcip">False</Option>
             <Option name="hashlimit_mode_srcport">False</Option>
-            <Option name="hashlimit_name"></Option>
+            <Option name="hashlimit_name"/>
             <Option name="hashlimit_size">0</Option>
-            <Option name="hashlimit_suffix"></Option>
+            <Option name="hashlimit_suffix"/>
             <Option name="hashlimit_value">0</Option>
             <Option name="limit_burst">0</Option>
-            <Option name="limit_suffix"></Option>
+            <Option name="limit_suffix"/>
             <Option name="limit_value">0</Option>
             <Option name="limit_value_not">False</Option>
-            <Option name="log_level"></Option>
-            <Option name="log_prefix"></Option>
+            <Option name="log_level"/>
+            <Option name="log_prefix"/>
             <Option name="stateless">True</Option>
             <Option name="ulog_nlgroup">1</Option>
           </PolicyRuleOptions>
@@ -1152,65 +1170,65 @@
       <FirewallOptions>
         <Option name="accept_established">True</Option>
         <Option name="accept_new_tcp_with_no_syn">True</Option>
-        <Option name="action_on_reject"></Option>
-        <Option name="activationCmd"></Option>
+        <Option name="action_on_reject"/>
+        <Option name="activationCmd"/>
         <Option name="add_mgmt_ssh_rule_when_stoped">False</Option>
         <Option name="add_rules_for_ipv6_neighbor_discovery">False</Option>
-        <Option name="admUser"></Option>
-        <Option name="altAddress"></Option>
+        <Option name="admUser"/>
+        <Option name="altAddress"/>
         <Option name="bridging_fw">False</Option>
         <Option name="check_shading">True</Option>
         <Option name="clamp_mss_to_mtu">False</Option>
         <Option name="classify_mark_terminating">False</Option>
         <Option name="clear_unknown_interfaces">False</Option>
-        <Option name="cmdline"></Option>
-        <Option name="compiler"></Option>
+        <Option name="cmdline"/>
+        <Option name="compiler"/>
         <Option name="configure_bonding_interfaces">False</Option>
         <Option name="configure_bridge_interfaces">False</Option>
         <Option name="configure_interfaces">True</Option>
         <Option name="configure_vlan_interfaces">False</Option>
         <Option name="debug">False</Option>
         <Option name="drop_invalid">False</Option>
-        <Option name="epilog_script"></Option>
-        <Option name="firewall_dir"></Option>
+        <Option name="epilog_script"/>
+        <Option name="firewall_dir"/>
         <Option name="firewall_is_part_of_any_and_networks">False</Option>
         <Option name="flush_and_set_default_policy">True</Option>
         <Option name="ignore_empty_groups">False</Option>
         <Option name="ipv4_6_order">ipv4_first</Option>
-        <Option name="limit_suffix"></Option>
+        <Option name="limit_suffix"/>
         <Option name="limit_value">0</Option>
-        <Option name="linux24_accept_redirects"></Option>
-        <Option name="linux24_accept_source_route"></Option>
+        <Option name="linux24_accept_redirects"/>
+        <Option name="linux24_accept_source_route"/>
         <Option name="linux24_conntrack_hashsize">0</Option>
         <Option name="linux24_conntrack_max">0</Option>
-        <Option name="linux24_conntrack_tcp_be_liberal"></Option>
-        <Option name="linux24_icmp_echo_ignore_all"></Option>
-        <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
-        <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
-        <Option name="linux24_ip_dynaddr"></Option>
+        <Option name="linux24_conntrack_tcp_be_liberal"/>
+        <Option name="linux24_icmp_echo_ignore_all"/>
+        <Option name="linux24_icmp_echo_ignore_broadcasts"/>
+        <Option name="linux24_icmp_ignore_bogus_error_responses"/>
+        <Option name="linux24_ip_dynaddr"/>
         <Option name="linux24_ip_forward">0</Option>
-        <Option name="linux24_ipv6_forward"></Option>
-        <Option name="linux24_log_martians"></Option>
-        <Option name="linux24_path_brctl"></Option>
-        <Option name="linux24_path_ifenslave"></Option>
-        <Option name="linux24_path_ip"></Option>
-        <Option name="linux24_path_ip6tables"></Option>
-        <Option name="linux24_path_ip6tables_restore"></Option>
-        <Option name="linux24_path_iptables"></Option>
-        <Option name="linux24_path_iptables_restore"></Option>
-        <Option name="linux24_path_logger"></Option>
-        <Option name="linux24_path_lsmod"></Option>
-        <Option name="linux24_path_modprobe"></Option>
-        <Option name="linux24_path_vconfig"></Option>
-        <Option name="linux24_rp_filter"></Option>
-        <Option name="linux24_tcp_ecn"></Option>
-        <Option name="linux24_tcp_fack"></Option>
+        <Option name="linux24_ipv6_forward"/>
+        <Option name="linux24_log_martians"/>
+        <Option name="linux24_path_brctl"/>
+        <Option name="linux24_path_ifenslave"/>
+        <Option name="linux24_path_ip"/>
+        <Option name="linux24_path_ip6tables"/>
+        <Option name="linux24_path_ip6tables_restore"/>
+        <Option name="linux24_path_iptables"/>
+        <Option name="linux24_path_iptables_restore"/>
+        <Option name="linux24_path_logger"/>
+        <Option name="linux24_path_lsmod"/>
+        <Option name="linux24_path_modprobe"/>
+        <Option name="linux24_path_vconfig"/>
+        <Option name="linux24_rp_filter"/>
+        <Option name="linux24_tcp_ecn"/>
+        <Option name="linux24_tcp_fack"/>
         <Option name="linux24_tcp_fin_timeout">0</Option>
         <Option name="linux24_tcp_keepalive_interval">0</Option>
-        <Option name="linux24_tcp_sack"></Option>
-        <Option name="linux24_tcp_syncookies"></Option>
-        <Option name="linux24_tcp_timestamps"></Option>
-        <Option name="linux24_tcp_window_scaling"></Option>
+        <Option name="linux24_tcp_sack"/>
+        <Option name="linux24_tcp_syncookies"/>
+        <Option name="linux24_tcp_timestamps"/>
+        <Option name="linux24_tcp_window_scaling"/>
         <Option name="load_modules">True</Option>
         <Option name="local_nat">False</Option>
         <Option name="log_all">False</Option>
@@ -1222,15 +1240,15 @@
         <Option name="log_tcp_seq">False</Option>
         <Option name="loopback_interface">lo</Option>
         <Option name="manage_virtual_addr">True</Option>
-        <Option name="mgmt_addr"></Option>
+        <Option name="mgmt_addr"/>
         <Option name="mgmt_ssh">False</Option>
         <Option name="modules_dir">/lib/modules/`uname -r`/kernel/net/</Option>
-        <Option name="output_file"></Option>
+        <Option name="output_file"/>
         <Option name="prolog_place">top</Option>
-        <Option name="prolog_script"></Option>
-        <Option name="scpArgs"></Option>
-        <Option name="script_name_on_firewall"></Option>
-        <Option name="sshArgs"></Option>
+        <Option name="prolog_script"/>
+        <Option name="scpArgs"/>
+        <Option name="script_name_on_firewall"/>
+        <Option name="sshArgs"/>
         <Option name="ulog_cprange">0</Option>
         <Option name="ulog_nlgroup">1</Option>
         <Option name="ulog_qthreshold">1</Option>
@@ -1270,15 +1288,15 @@
           <Option name="hashlimit_mode_dstport">False</Option>
           <Option name="hashlimit_mode_srcip">False</Option>
           <Option name="hashlimit_mode_srcport">False</Option>
-          <Option name="hashlimit_name"></Option>
+          <Option name="hashlimit_name"/>
           <Option name="hashlimit_size">0</Option>
           <Option name="hashlimit_suffix">/second</Option>
           <Option name="hashlimit_value">20</Option>
           <Option name="limit_burst">0</Option>
-          <Option name="limit_suffix"></Option>
+          <Option name="limit_suffix"/>
           <Option name="limit_value">0</Option>
-          <Option name="log_level"></Option>
-          <Option name="log_prefix"></Option>
+          <Option name="log_level"/>
+          <Option name="log_prefix"/>
           <Option name="stateless">True</Option>
           <Option name="ulog_nlgroup">1</Option>
         </PolicyRuleOptions>
@@ -1309,6 +1327,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id8387X11449" disabled="False" group="" position="1" action="Translate" comment="">
@@ -1330,6 +1351,9 @@
             <TSrv neg="False">
               <ServiceRef ref="id3B4FF09A"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <RuleSetOptions/>
@@ -1422,16 +1446,16 @@
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="limit_value_not">False</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">False</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -1466,16 +1490,16 @@
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="limit_value_not">False</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">False</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -1523,7 +1547,7 @@
               <Option name="connlimit_above_not">False</Option>
               <Option name="connlimit_masklen">0</Option>
               <Option name="connlimit_value">0</Option>
-              <Option name="firewall_is_part_of_any_and_networks"></Option>
+              <Option name="firewall_is_part_of_any_and_networks"/>
               <Option name="hashlimit_burst">0</Option>
               <Option name="hashlimit_dstlimit">False</Option>
               <Option name="hashlimit_expire">0</Option>
@@ -1533,16 +1557,16 @@
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="limit_value_not">False</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">False</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -1579,16 +1603,16 @@
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="limit_value_not">False</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">False</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -1624,16 +1648,16 @@
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="limit_value_not">False</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">False</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -1846,6 +1870,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <RuleSetOptions/>
@@ -1991,15 +2018,15 @@
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -2144,6 +2171,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3588X13311" disabled="False" position="1" action="Translate" comment="">
@@ -2165,6 +2195,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id108371X21712" disabled="False" group="" position="2" action="Translate" comment="">
@@ -2186,6 +2219,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id323007X21712" disabled="False" group="" position="3" action="Translate" comment="">
@@ -2207,6 +2243,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <RuleSetOptions/>
@@ -2340,12 +2379,12 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="branch_id">id6187X76214</Option>
-              <Option name="classify_str"></Option>
+              <Option name="classify_str"/>
               <Option name="connlimit_masklen">0</Option>
               <Option name="connlimit_value">0</Option>
-              <Option name="custom_str"></Option>
+              <Option name="custom_str"/>
               <Option name="firewall_is_part_of_any_and_networks">False</Option>
               <Option name="hashlimit_burst">0</Option>
               <Option name="hashlimit_dstlimit">False</Option>
@@ -2356,34 +2395,34 @@
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_branch_in_mangle">False</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">none</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -2405,12 +2444,12 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="branch_id">id6187X76214</Option>
-              <Option name="classify_str"></Option>
+              <Option name="classify_str"/>
               <Option name="connlimit_masklen">0</Option>
               <Option name="connlimit_value">0</Option>
-              <Option name="custom_str"></Option>
+              <Option name="custom_str"/>
               <Option name="firewall_is_part_of_any_and_networks">False</Option>
               <Option name="hashlimit_burst">0</Option>
               <Option name="hashlimit_dstlimit">False</Option>
@@ -2421,34 +2460,34 @@
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_branch_in_mangle">False</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">none</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -2483,16 +2522,16 @@
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="limit_value_not">False</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -2527,16 +2566,16 @@
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="limit_value_not">False</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -2571,16 +2610,16 @@
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="limit_value_not">False</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">False</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -2615,16 +2654,16 @@
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="limit_value_not">False</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">False</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -2659,16 +2698,16 @@
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="limit_value_not">False</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">False</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -2703,16 +2742,16 @@
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="limit_value_not">False</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">False</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -2747,16 +2786,16 @@
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="limit_value_not">False</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">False</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -2791,16 +2830,16 @@
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="limit_value_not">False</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">False</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -2835,16 +2874,16 @@
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="limit_value_not">False</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">False</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -2879,16 +2918,16 @@
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="limit_value_not">False</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">False</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -2923,16 +2962,16 @@
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="limit_value_not">False</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">False</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -3068,7 +3107,7 @@
           </FailoverClusterGroup>
         </Interface>
         <FirewallOptions>
-          <Option name="ipt_mangle_only_rulesets"></Option>
+          <Option name="ipt_mangle_only_rulesets"/>
         </FirewallOptions>
         <StateSyncClusterGroup id="id3604X13311" master_iface="id2843X69605" type="conntrack" name="State Sync Group" comment="">
           <ObjectRef ref="id2843X69605"/>
@@ -3100,6 +3139,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <RuleSetOptions/>
@@ -3245,15 +3287,15 @@
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -3383,6 +3425,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <RuleSetOptions/>
@@ -3528,15 +3573,15 @@
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -3570,15 +3615,15 @@
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -3733,6 +3778,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id5384X20350" disabled="False" position="1" action="Translate" comment="">
@@ -3754,6 +3802,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <RuleSetOptions/>
@@ -3887,12 +3938,12 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="branch_id">id5367X20350</Option>
-              <Option name="classify_str"></Option>
+              <Option name="classify_str"/>
               <Option name="connlimit_masklen">0</Option>
               <Option name="connlimit_value">0</Option>
-              <Option name="custom_str"></Option>
+              <Option name="custom_str"/>
               <Option name="firewall_is_part_of_any_and_networks">False</Option>
               <Option name="hashlimit_burst">0</Option>
               <Option name="hashlimit_dstlimit">False</Option>
@@ -3903,34 +3954,34 @@
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_branch_in_mangle">False</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">none</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -3952,12 +4003,12 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="branch_id">id5367X20350</Option>
-              <Option name="classify_str"></Option>
+              <Option name="classify_str"/>
               <Option name="connlimit_masklen">0</Option>
               <Option name="connlimit_value">0</Option>
-              <Option name="custom_str"></Option>
+              <Option name="custom_str"/>
               <Option name="firewall_is_part_of_any_and_networks">False</Option>
               <Option name="hashlimit_burst">0</Option>
               <Option name="hashlimit_dstlimit">False</Option>
@@ -3968,34 +4019,34 @@
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_branch_in_mangle">False</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">none</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -4029,15 +4080,15 @@
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -4153,7 +4204,7 @@
           </FailoverClusterGroup>
         </Interface>
         <FirewallOptions>
-          <Option name="ipt_mangle_only_rulesets"></Option>
+          <Option name="ipt_mangle_only_rulesets"/>
         </FirewallOptions>
         <StateSyncClusterGroup id="id5410X20350" master_iface="id2843X69605" type="conntrack" name="heartbeat_cluster_2:members-1" comment="">
           <ObjectRef ref="id2843X69605"/>
@@ -4186,6 +4237,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id58845X27834" disabled="False" position="1" action="Translate" comment="">
@@ -4207,6 +4261,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
               <Option name="ipt_nat_persistent">False</Option>
               <Option name="ipt_nat_random">False</Option>
@@ -4232,6 +4289,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
               <Option name="ipt_nat_persistent">False</Option>
               <Option name="ipt_nat_random">True</Option>
@@ -4257,6 +4317,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id192468X66859" disabled="False" group="" position="4" action="Translate" comment="">
@@ -4278,6 +4341,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <RuleSetOptions/>
@@ -4404,16 +4470,16 @@
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="limit_value_not">False</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">False</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -4448,16 +4514,16 @@
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="limit_value_not">False</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">False</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -4510,16 +4576,16 @@
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="limit_value_not">False</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">False</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -4554,16 +4620,16 @@
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="limit_value_not">False</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">False</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -4598,16 +4664,16 @@
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="limit_value_not">False</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">False</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -4650,7 +4716,7 @@
               <Option name="connlimit_above_not">False</Option>
               <Option name="connlimit_masklen">0</Option>
               <Option name="connlimit_value">0</Option>
-              <Option name="firewall_is_part_of_any_and_networks"></Option>
+              <Option name="firewall_is_part_of_any_and_networks"/>
               <Option name="hashlimit_burst">0</Option>
               <Option name="hashlimit_dstlimit">False</Option>
               <Option name="hashlimit_expire">0</Option>
@@ -4660,16 +4726,16 @@
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="limit_value_not">False</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -4745,16 +4811,16 @@
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="limit_value_not">False</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">False</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -4790,16 +4856,16 @@
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="limit_value_not">False</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">False</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -4834,16 +4900,16 @@
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="limit_value_not">False</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">False</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -4879,16 +4945,16 @@
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="limit_value_not">False</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">False</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -4923,16 +4989,16 @@
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="limit_value_not">False</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">False</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -4968,16 +5034,16 @@
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="limit_value_not">False</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">False</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -5002,7 +5068,7 @@
               <Option name="connlimit_above_not">False</Option>
               <Option name="connlimit_masklen">0</Option>
               <Option name="connlimit_value">0</Option>
-              <Option name="firewall_is_part_of_any_and_networks"></Option>
+              <Option name="firewall_is_part_of_any_and_networks"/>
               <Option name="hashlimit_burst">0</Option>
               <Option name="hashlimit_dstlimit">False</Option>
               <Option name="hashlimit_expire">0</Option>
@@ -5012,16 +5078,16 @@
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="limit_value_not">False</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">False</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -5047,7 +5113,7 @@
               <Option name="connlimit_above_not">False</Option>
               <Option name="connlimit_masklen">0</Option>
               <Option name="connlimit_value">0</Option>
-              <Option name="firewall_is_part_of_any_and_networks"></Option>
+              <Option name="firewall_is_part_of_any_and_networks"/>
               <Option name="hashlimit_burst">0</Option>
               <Option name="hashlimit_dstlimit">False</Option>
               <Option name="hashlimit_expire">0</Option>
@@ -5057,16 +5123,16 @@
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="limit_value_not">False</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">False</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -5101,16 +5167,16 @@
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="limit_value_not">False</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">False</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -5146,16 +5212,16 @@
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="limit_value_not">False</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">False</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -5248,16 +5314,16 @@
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="limit_value_not">False</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -5390,15 +5456,15 @@
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
               <Option name="hashlimit_suffix">/second</Option>
               <Option name="hashlimit_value">10</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -5445,19 +5511,19 @@
         <FirewallOptions>
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
-          <Option name="action_on_reject"></Option>
-          <Option name="activationCmd"></Option>
+          <Option name="action_on_reject"/>
+          <Option name="activationCmd"/>
           <Option name="add_mgmt_ssh_rule_when_stoped">False</Option>
           <Option name="add_rules_for_ipv6_neighbor_discovery">False</Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">False</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
           <Option name="classify_mark_terminating">False</Option>
           <Option name="clear_unknown_interfaces">False</Option>
           <Option name="cmdline">-xc</Option>
-          <Option name="compiler"></Option>
+          <Option name="compiler"/>
           <Option name="configure_bonding_interfaces">False</Option>
           <Option name="configure_bridge_interfaces">False</Option>
           <Option name="configure_interfaces">True</Option>
@@ -5465,15 +5531,15 @@
           <Option name="debug">False</Option>
           <Option name="drop_invalid">False</Option>
           <Option name="eliminate_duplicates">true</Option>
-          <Option name="epilog_script"></Option>
+          <Option name="epilog_script"/>
           <Option name="firewall_dir">/etc</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="flush_and_set_default_policy">True</Option>
           <Option name="freebsd_ip_forward">1</Option>
           <Option name="ignore_empty_groups">False</Option>
-          <Option name="ipt_mangle_only_rulesets"></Option>
+          <Option name="ipt_mangle_only_rulesets"/>
           <Option name="ipv4_6_order">ipv4_first</Option>
-          <Option name="limit_suffix"></Option>
+          <Option name="limit_suffix"/>
           <Option name="limit_value">0</Option>
           <Option name="linux24_ip_forward">1</Option>
           <Option name="load_modules">True</Option>
@@ -5488,11 +5554,11 @@
           <Option name="loopback_interface">lo</Option>
           <Option name="macosx_ip_forward">1</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"></Option>
+          <Option name="mgmt_addr"/>
           <Option name="mgmt_ssh">False</Option>
           <Option name="modules_dir">/lib/modules/`uname -r`/kernel/net/</Option>
           <Option name="openbsd_ip_forward">1</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="pf_limit_frags">5000</Option>
           <Option name="pf_limit_states">10000</Option>
           <Option name="pf_timeout_frag">30</Option>
@@ -5510,14 +5576,14 @@
           <Option name="pix_syslog_device_id_supported">false</Option>
           <Option name="pix_use_acl_remarks">true</Option>
           <Option name="prolog_place">top</Option>
-          <Option name="prolog_script"></Option>
-          <Option name="scpArgs"></Option>
-          <Option name="script_name_on_firewall"></Option>
+          <Option name="prolog_script"/>
+          <Option name="scpArgs"/>
+          <Option name="script_name_on_firewall"/>
           <Option name="secuwall_add_files">False</Option>
           <Option name="secuwall_add_files_dir">/opt/secuwall/templates/default</Option>
           <Option name="secuwall_dns_reso1">files</Option>
           <Option name="solaris_ip_forward">1</Option>
-          <Option name="sshArgs"></Option>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -5564,15 +5630,15 @@
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
               <Option name="hashlimit_suffix">/second</Option>
               <Option name="hashlimit_value">20</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -5602,19 +5668,19 @@
         <FirewallOptions>
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
-          <Option name="action_on_reject"></Option>
-          <Option name="activationCmd"></Option>
+          <Option name="action_on_reject"/>
+          <Option name="activationCmd"/>
           <Option name="add_mgmt_ssh_rule_when_stoped">False</Option>
           <Option name="add_rules_for_ipv6_neighbor_discovery">False</Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">False</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
           <Option name="classify_mark_terminating">False</Option>
           <Option name="clear_unknown_interfaces">False</Option>
           <Option name="cmdline">-xc</Option>
-          <Option name="compiler"></Option>
+          <Option name="compiler"/>
           <Option name="configure_bonding_interfaces">False</Option>
           <Option name="configure_bridge_interfaces">False</Option>
           <Option name="configure_interfaces">True</Option>
@@ -5622,15 +5688,15 @@
           <Option name="debug">False</Option>
           <Option name="drop_invalid">False</Option>
           <Option name="eliminate_duplicates">true</Option>
-          <Option name="epilog_script"></Option>
+          <Option name="epilog_script"/>
           <Option name="firewall_dir">/etc</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="flush_and_set_default_policy">True</Option>
           <Option name="freebsd_ip_forward">1</Option>
           <Option name="ignore_empty_groups">False</Option>
-          <Option name="ipt_mangle_only_rulesets"></Option>
+          <Option name="ipt_mangle_only_rulesets"/>
           <Option name="ipv4_6_order">ipv4_first</Option>
-          <Option name="limit_suffix"></Option>
+          <Option name="limit_suffix"/>
           <Option name="limit_value">0</Option>
           <Option name="linux24_ip_forward">1</Option>
           <Option name="load_modules">True</Option>
@@ -5645,11 +5711,11 @@
           <Option name="loopback_interface">lo</Option>
           <Option name="macosx_ip_forward">1</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"></Option>
+          <Option name="mgmt_addr"/>
           <Option name="mgmt_ssh">False</Option>
           <Option name="modules_dir">/lib/modules/`uname -r`/kernel/net/</Option>
           <Option name="openbsd_ip_forward">1</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="pf_limit_frags">5000</Option>
           <Option name="pf_limit_states">10000</Option>
           <Option name="pf_timeout_frag">30</Option>
@@ -5667,14 +5733,14 @@
           <Option name="pix_syslog_device_id_supported">false</Option>
           <Option name="pix_use_acl_remarks">true</Option>
           <Option name="prolog_place">top</Option>
-          <Option name="prolog_script"></Option>
-          <Option name="scpArgs"></Option>
-          <Option name="script_name_on_firewall"></Option>
+          <Option name="prolog_script"/>
+          <Option name="scpArgs"/>
+          <Option name="script_name_on_firewall"/>
           <Option name="secuwall_add_files">False</Option>
           <Option name="secuwall_add_files_dir">/opt/secuwall/templates/default</Option>
           <Option name="secuwall_dns_reso1">files</Option>
           <Option name="solaris_ip_forward">1</Option>
-          <Option name="sshArgs"></Option>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -5707,9 +5773,9 @@
             <Option name="iface_disablearp">False</Option>
             <Option name="iface_disableboot">False</Option>
             <Option name="iface_mtu">1500</Option>
-            <Option name="iface_options"></Option>
+            <Option name="iface_options"/>
             <Option name="type">ethernet</Option>
-            <Option name="vlan_id"></Option>
+            <Option name="vlan_id"/>
           </InterfaceOptions>
         </Interface>
         <Interface id="id4038X2906" dedicated_failover="False" dyn="False" label="" mgmt="False" security_level="100" unnum="False" unprotected="False" name="lo" comment="" ro="False">
@@ -5727,28 +5793,28 @@
         <FirewallOptions>
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
-          <Option name="action_on_reject"></Option>
-          <Option name="activationCmd"></Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="action_on_reject"/>
+          <Option name="activationCmd"/>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">False</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
           <Option name="classify_mark_terminating">False</Option>
-          <Option name="cmdline"></Option>
-          <Option name="compiler"></Option>
+          <Option name="cmdline"/>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="drop_invalid">False</Option>
           <Option name="eliminate_duplicates">true</Option>
-          <Option name="epilog_script"></Option>
+          <Option name="epilog_script"/>
           <Option name="firewall_dir">/etc</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="flush_and_set_default_policy">True</Option>
           <Option name="freebsd_ip_forward">1</Option>
           <Option name="ignore_empty_groups">False</Option>
           <Option name="ipv4_6_order">ipv4_first</Option>
-          <Option name="limit_suffix"></Option>
+          <Option name="limit_suffix"/>
           <Option name="limit_value">0</Option>
           <Option name="linux24_ip_forward">1</Option>
           <Option name="load_modules">True</Option>
@@ -5763,11 +5829,11 @@
           <Option name="loopback_interface">lo</Option>
           <Option name="macosx_ip_forward">1</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"></Option>
+          <Option name="mgmt_addr"/>
           <Option name="mgmt_ssh">False</Option>
           <Option name="modules_dir">/lib/modules/`uname -r`/kernel/net/</Option>
           <Option name="openbsd_ip_forward">1</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="pf_limit_frags">5000</Option>
           <Option name="pf_limit_states">10000</Option>
           <Option name="pf_timeout_frag">30</Option>
@@ -5785,13 +5851,13 @@
           <Option name="pix_syslog_device_id_supported">false</Option>
           <Option name="pix_use_acl_remarks">true</Option>
           <Option name="prolog_place">top</Option>
-          <Option name="prolog_script"></Option>
-          <Option name="scpArgs"></Option>
+          <Option name="prolog_script"/>
+          <Option name="scpArgs"/>
           <Option name="secuwall_add_files">False</Option>
           <Option name="secuwall_add_files_dir">/opt/secuwall/templates/default</Option>
           <Option name="secuwall_dns_reso1">files</Option>
           <Option name="solaris_ip_forward">1</Option>
-          <Option name="sshArgs"></Option>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -5838,9 +5904,9 @@
             <Option name="iface_disablearp">False</Option>
             <Option name="iface_disableboot">False</Option>
             <Option name="iface_mtu">1500</Option>
-            <Option name="iface_options"></Option>
+            <Option name="iface_options"/>
             <Option name="type">bonding</Option>
-            <Option name="vlan_id"></Option>
+            <Option name="vlan_id"/>
           </InterfaceOptions>
           <Interface id="id3807X49120" dedicated_failover="False" dyn="False" label="" security_level="0" unnum="False" unprotected="False" name="eth2" comment="" ro="False">
             <InterfaceOptions>
@@ -5863,28 +5929,28 @@
         <FirewallOptions>
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
-          <Option name="action_on_reject"></Option>
-          <Option name="activationCmd"></Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="action_on_reject"/>
+          <Option name="activationCmd"/>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">False</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
           <Option name="classify_mark_terminating">False</Option>
-          <Option name="cmdline"></Option>
-          <Option name="compiler"></Option>
+          <Option name="cmdline"/>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="drop_invalid">False</Option>
           <Option name="eliminate_duplicates">true</Option>
-          <Option name="epilog_script"></Option>
+          <Option name="epilog_script"/>
           <Option name="firewall_dir">/etc</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="flush_and_set_default_policy">True</Option>
           <Option name="freebsd_ip_forward">1</Option>
           <Option name="ignore_empty_groups">False</Option>
           <Option name="ipv4_6_order">ipv4_first</Option>
-          <Option name="limit_suffix"></Option>
+          <Option name="limit_suffix"/>
           <Option name="limit_value">0</Option>
           <Option name="linux24_ip_forward">1</Option>
           <Option name="load_modules">True</Option>
@@ -5899,11 +5965,11 @@
           <Option name="loopback_interface">lo</Option>
           <Option name="macosx_ip_forward">1</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"></Option>
+          <Option name="mgmt_addr"/>
           <Option name="mgmt_ssh">False</Option>
           <Option name="modules_dir">/lib/modules/`uname -r`/kernel/net/</Option>
           <Option name="openbsd_ip_forward">1</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="pf_limit_frags">5000</Option>
           <Option name="pf_limit_states">10000</Option>
           <Option name="pf_timeout_frag">30</Option>
@@ -5921,13 +5987,13 @@
           <Option name="pix_syslog_device_id_supported">false</Option>
           <Option name="pix_use_acl_remarks">true</Option>
           <Option name="prolog_place">top</Option>
-          <Option name="prolog_script"></Option>
-          <Option name="scpArgs"></Option>
+          <Option name="prolog_script"/>
+          <Option name="scpArgs"/>
           <Option name="secuwall_add_files">False</Option>
           <Option name="secuwall_add_files_dir">/opt/secuwall/templates/default</Option>
           <Option name="secuwall_dns_reso1">files</Option>
           <Option name="solaris_ip_forward">1</Option>
-          <Option name="sshArgs"></Option>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -6002,16 +6068,16 @@
         <FirewallOptions>
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
-          <Option name="action_on_reject"></Option>
-          <Option name="activationCmd"></Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="action_on_reject"/>
+          <Option name="activationCmd"/>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">False</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
           <Option name="classify_mark_terminating">False</Option>
-          <Option name="cmdline"></Option>
-          <Option name="compiler"></Option>
+          <Option name="cmdline"/>
+          <Option name="compiler"/>
           <Option name="configure_bonding_interfaces">True</Option>
           <Option name="configure_bridge_interfaces">True</Option>
           <Option name="configure_interfaces">True</Option>
@@ -6019,14 +6085,14 @@
           <Option name="debug">False</Option>
           <Option name="drop_invalid">False</Option>
           <Option name="eliminate_duplicates">true</Option>
-          <Option name="epilog_script"></Option>
+          <Option name="epilog_script"/>
           <Option name="firewall_dir">/etc</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="flush_and_set_default_policy">True</Option>
           <Option name="freebsd_ip_forward">1</Option>
           <Option name="ignore_empty_groups">False</Option>
           <Option name="ipv4_6_order">ipv4_first</Option>
-          <Option name="limit_suffix"></Option>
+          <Option name="limit_suffix"/>
           <Option name="limit_value">0</Option>
           <Option name="linux24_ip_forward">1</Option>
           <Option name="load_modules">True</Option>
@@ -6041,11 +6107,11 @@
           <Option name="loopback_interface">lo</Option>
           <Option name="macosx_ip_forward">1</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"></Option>
+          <Option name="mgmt_addr"/>
           <Option name="mgmt_ssh">False</Option>
           <Option name="modules_dir">/lib/modules/`uname -r`/kernel/net/</Option>
           <Option name="openbsd_ip_forward">1</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="pf_limit_frags">5000</Option>
           <Option name="pf_limit_states">10000</Option>
           <Option name="pf_timeout_frag">30</Option>
@@ -6063,13 +6129,13 @@
           <Option name="pix_syslog_device_id_supported">false</Option>
           <Option name="pix_use_acl_remarks">true</Option>
           <Option name="prolog_place">top</Option>
-          <Option name="prolog_script"></Option>
-          <Option name="scpArgs"></Option>
+          <Option name="prolog_script"/>
+          <Option name="scpArgs"/>
           <Option name="secuwall_add_files">False</Option>
           <Option name="secuwall_add_files_dir">/opt/secuwall/templates/default</Option>
           <Option name="secuwall_dns_reso1">files</Option>
           <Option name="solaris_ip_forward">1</Option>
-          <Option name="sshArgs"></Option>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -6132,7 +6198,7 @@
           <InterfaceOptions>
             <Option name="bonding_mode">blance xor</Option>
             <Option name="bonding_policy">balance-xor</Option>
-            <Option name="bondng_driver_options"></Option>
+            <Option name="bondng_driver_options"/>
             <Option name="dev_plus_vid">False</Option>
             <Option name="dev_plus_vid_no_pad">False</Option>
             <Option name="enable_stp">True</Option>
@@ -6162,12 +6228,12 @@
           <Interface id="id6778X41225" dedicated_failover="False" dyn="False" label="" security_level="0" unnum="False" unprotected="False" name="bond1.123" comment="" ro="False">
             <IPv4 id="id16320X39036" name="linux-bonding-1:bond1:bond1.123:ip" comment="" ro="False" address="172.16.2.1" netmask="255.255.255.0"/>
             <InterfaceOptions>
-              <Option name="bonding_policy"></Option>
-              <Option name="bondng_driver_options"></Option>
+              <Option name="bonding_policy"/>
+              <Option name="bondng_driver_options"/>
               <Option name="enable_stp">False</Option>
               <Option name="type">8021q</Option>
               <Option name="vlan_id">123</Option>
-              <Option name="xmit_hash_policy"></Option>
+              <Option name="xmit_hash_policy"/>
             </InterfaceOptions>
           </Interface>
         </Interface>
@@ -6193,16 +6259,16 @@
         <FirewallOptions>
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
-          <Option name="action_on_reject"></Option>
-          <Option name="activationCmd"></Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="action_on_reject"/>
+          <Option name="activationCmd"/>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">False</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
           <Option name="classify_mark_terminating">False</Option>
-          <Option name="cmdline"></Option>
-          <Option name="compiler"></Option>
+          <Option name="cmdline"/>
+          <Option name="compiler"/>
           <Option name="configure_bonding_interfaces">True</Option>
           <Option name="configure_bridge_interfaces">True</Option>
           <Option name="configure_interfaces">True</Option>
@@ -6210,14 +6276,14 @@
           <Option name="debug">False</Option>
           <Option name="drop_invalid">False</Option>
           <Option name="eliminate_duplicates">true</Option>
-          <Option name="epilog_script"></Option>
+          <Option name="epilog_script"/>
           <Option name="firewall_dir">/etc</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="flush_and_set_default_policy">True</Option>
           <Option name="freebsd_ip_forward">1</Option>
           <Option name="ignore_empty_groups">False</Option>
           <Option name="ipv4_6_order">ipv4_first</Option>
-          <Option name="limit_suffix"></Option>
+          <Option name="limit_suffix"/>
           <Option name="limit_value">0</Option>
           <Option name="linux24_ip_forward">1</Option>
           <Option name="load_modules">True</Option>
@@ -6232,11 +6298,11 @@
           <Option name="loopback_interface">lo</Option>
           <Option name="macosx_ip_forward">1</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"></Option>
+          <Option name="mgmt_addr"/>
           <Option name="mgmt_ssh">False</Option>
           <Option name="modules_dir">/lib/modules/`uname -r`/kernel/net/</Option>
           <Option name="openbsd_ip_forward">1</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="pf_limit_frags">5000</Option>
           <Option name="pf_limit_states">10000</Option>
           <Option name="pf_timeout_frag">30</Option>
@@ -6254,13 +6320,13 @@
           <Option name="pix_syslog_device_id_supported">false</Option>
           <Option name="pix_use_acl_remarks">true</Option>
           <Option name="prolog_place">top</Option>
-          <Option name="prolog_script"></Option>
-          <Option name="scpArgs"></Option>
+          <Option name="prolog_script"/>
+          <Option name="scpArgs"/>
           <Option name="secuwall_add_files">False</Option>
           <Option name="secuwall_add_files_dir">/opt/secuwall/templates/default</Option>
           <Option name="secuwall_dns_reso1">files</Option>
           <Option name="solaris_ip_forward">1</Option>
-          <Option name="sshArgs"></Option>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -6311,19 +6377,19 @@
         <FirewallOptions>
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
-          <Option name="action_on_reject"></Option>
-          <Option name="activationCmd"></Option>
+          <Option name="action_on_reject"/>
+          <Option name="activationCmd"/>
           <Option name="add_mgmt_ssh_rule_when_stoped">False</Option>
           <Option name="add_rules_for_ipv6_neighbor_discovery">False</Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">False</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
           <Option name="classify_mark_terminating">False</Option>
           <Option name="clear_unknown_interfaces">False</Option>
           <Option name="cmdline">-xt</Option>
-          <Option name="compiler"></Option>
+          <Option name="compiler"/>
           <Option name="configure_bonding_interfaces">False</Option>
           <Option name="configure_bridge_interfaces">False</Option>
           <Option name="configure_interfaces">True</Option>
@@ -6331,14 +6397,14 @@
           <Option name="debug">False</Option>
           <Option name="drop_invalid">False</Option>
           <Option name="eliminate_duplicates">true</Option>
-          <Option name="epilog_script"></Option>
+          <Option name="epilog_script"/>
           <Option name="firewall_dir">/etc</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="flush_and_set_default_policy">True</Option>
           <Option name="freebsd_ip_forward">1</Option>
           <Option name="ignore_empty_groups">False</Option>
           <Option name="ipv4_6_order">ipv4_first</Option>
-          <Option name="limit_suffix"></Option>
+          <Option name="limit_suffix"/>
           <Option name="limit_value">0</Option>
           <Option name="linux24_ip_forward">1</Option>
           <Option name="load_modules">True</Option>
@@ -6353,11 +6419,11 @@
           <Option name="loopback_interface">lo</Option>
           <Option name="macosx_ip_forward">1</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"></Option>
+          <Option name="mgmt_addr"/>
           <Option name="mgmt_ssh">False</Option>
           <Option name="modules_dir">/lib/modules/`uname -r`/kernel/net/</Option>
           <Option name="openbsd_ip_forward">1</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="pf_limit_frags">5000</Option>
           <Option name="pf_limit_states">10000</Option>
           <Option name="pf_timeout_frag">30</Option>
@@ -6375,11 +6441,11 @@
           <Option name="pix_syslog_device_id_supported">false</Option>
           <Option name="pix_use_acl_remarks">true</Option>
           <Option name="prolog_place">top</Option>
-          <Option name="prolog_script"></Option>
-          <Option name="scpArgs"></Option>
+          <Option name="prolog_script"/>
+          <Option name="scpArgs"/>
           <Option name="script_name_on_firewall">firewall.sh</Option>
           <Option name="solaris_ip_forward">1</Option>
-          <Option name="sshArgs"></Option>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -6430,19 +6496,19 @@
         <FirewallOptions>
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
-          <Option name="action_on_reject"></Option>
-          <Option name="activationCmd"></Option>
+          <Option name="action_on_reject"/>
+          <Option name="activationCmd"/>
           <Option name="add_mgmt_ssh_rule_when_stoped">False</Option>
           <Option name="add_rules_for_ipv6_neighbor_discovery">False</Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">False</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
           <Option name="classify_mark_terminating">False</Option>
           <Option name="clear_unknown_interfaces">False</Option>
           <Option name="cmdline">-xt</Option>
-          <Option name="compiler"></Option>
+          <Option name="compiler"/>
           <Option name="configure_bonding_interfaces">False</Option>
           <Option name="configure_bridge_interfaces">False</Option>
           <Option name="configure_interfaces">True</Option>
@@ -6450,14 +6516,14 @@
           <Option name="debug">False</Option>
           <Option name="drop_invalid">False</Option>
           <Option name="eliminate_duplicates">true</Option>
-          <Option name="epilog_script"></Option>
+          <Option name="epilog_script"/>
           <Option name="firewall_dir">/etc</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="flush_and_set_default_policy">True</Option>
           <Option name="freebsd_ip_forward">1</Option>
           <Option name="ignore_empty_groups">False</Option>
           <Option name="ipv4_6_order">ipv4_first</Option>
-          <Option name="limit_suffix"></Option>
+          <Option name="limit_suffix"/>
           <Option name="limit_value">0</Option>
           <Option name="linux24_ip_forward">1</Option>
           <Option name="load_modules">True</Option>
@@ -6472,11 +6538,11 @@
           <Option name="loopback_interface">lo</Option>
           <Option name="macosx_ip_forward">1</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"></Option>
+          <Option name="mgmt_addr"/>
           <Option name="mgmt_ssh">False</Option>
           <Option name="modules_dir">/lib/modules/`uname -r`/kernel/net/</Option>
           <Option name="openbsd_ip_forward">1</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="pf_limit_frags">5000</Option>
           <Option name="pf_limit_states">10000</Option>
           <Option name="pf_timeout_frag">30</Option>
@@ -6494,11 +6560,11 @@
           <Option name="pix_syslog_device_id_supported">false</Option>
           <Option name="pix_use_acl_remarks">true</Option>
           <Option name="prolog_place">top</Option>
-          <Option name="prolog_script"></Option>
-          <Option name="scpArgs"></Option>
+          <Option name="prolog_script"/>
+          <Option name="scpArgs"/>
           <Option name="script_name_on_firewall">firewall.sh</Option>
           <Option name="solaris_ip_forward">1</Option>
-          <Option name="sshArgs"></Option>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -6529,6 +6595,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <RuleSetOptions/>
@@ -6745,6 +6814,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <RuleSetOptions/>
@@ -6966,65 +7038,65 @@
         <FirewallOptions>
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
-          <Option name="action_on_reject"></Option>
-          <Option name="activationCmd"></Option>
+          <Option name="action_on_reject"/>
+          <Option name="activationCmd"/>
           <Option name="add_mgmt_ssh_rule_when_stoped">False</Option>
           <Option name="add_rules_for_ipv6_neighbor_discovery">False</Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">True</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
           <Option name="classify_mark_terminating">False</Option>
           <Option name="clear_unknown_interfaces">False</Option>
-          <Option name="cmdline"></Option>
-          <Option name="compiler"></Option>
+          <Option name="cmdline"/>
+          <Option name="compiler"/>
           <Option name="configure_bonding_interfaces">False</Option>
           <Option name="configure_bridge_interfaces">False</Option>
           <Option name="configure_interfaces">True</Option>
           <Option name="configure_vlan_interfaces">False</Option>
           <Option name="debug">False</Option>
           <Option name="drop_invalid">False</Option>
-          <Option name="epilog_script"></Option>
-          <Option name="firewall_dir"></Option>
+          <Option name="epilog_script"/>
+          <Option name="firewall_dir"/>
           <Option name="firewall_is_part_of_any_and_networks">False</Option>
           <Option name="flush_and_set_default_policy">True</Option>
           <Option name="ignore_empty_groups">False</Option>
           <Option name="ipv4_6_order">ipv4_first</Option>
-          <Option name="limit_suffix"></Option>
+          <Option name="limit_suffix"/>
           <Option name="limit_value">0</Option>
-          <Option name="linux24_accept_redirects"></Option>
-          <Option name="linux24_accept_source_route"></Option>
+          <Option name="linux24_accept_redirects"/>
+          <Option name="linux24_accept_source_route"/>
           <Option name="linux24_conntrack_hashsize">0</Option>
           <Option name="linux24_conntrack_max">0</Option>
-          <Option name="linux24_conntrack_tcp_be_liberal"></Option>
-          <Option name="linux24_icmp_echo_ignore_all"></Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
-          <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
-          <Option name="linux24_ip_dynaddr"></Option>
+          <Option name="linux24_conntrack_tcp_be_liberal"/>
+          <Option name="linux24_icmp_echo_ignore_all"/>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
+          <Option name="linux24_icmp_ignore_bogus_error_responses"/>
+          <Option name="linux24_ip_dynaddr"/>
           <Option name="linux24_ip_forward">0</Option>
-          <Option name="linux24_ipv6_forward"></Option>
-          <Option name="linux24_log_martians"></Option>
-          <Option name="linux24_path_brctl"></Option>
-          <Option name="linux24_path_ifenslave"></Option>
-          <Option name="linux24_path_ip"></Option>
-          <Option name="linux24_path_ip6tables"></Option>
-          <Option name="linux24_path_ip6tables_restore"></Option>
-          <Option name="linux24_path_iptables"></Option>
-          <Option name="linux24_path_iptables_restore"></Option>
-          <Option name="linux24_path_logger"></Option>
-          <Option name="linux24_path_lsmod"></Option>
-          <Option name="linux24_path_modprobe"></Option>
-          <Option name="linux24_path_vconfig"></Option>
-          <Option name="linux24_rp_filter"></Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_ipv6_forward"/>
+          <Option name="linux24_log_martians"/>
+          <Option name="linux24_path_brctl"/>
+          <Option name="linux24_path_ifenslave"/>
+          <Option name="linux24_path_ip"/>
+          <Option name="linux24_path_ip6tables"/>
+          <Option name="linux24_path_ip6tables_restore"/>
+          <Option name="linux24_path_iptables"/>
+          <Option name="linux24_path_iptables_restore"/>
+          <Option name="linux24_path_logger"/>
+          <Option name="linux24_path_lsmod"/>
+          <Option name="linux24_path_modprobe"/>
+          <Option name="linux24_path_vconfig"/>
+          <Option name="linux24_rp_filter"/>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">0</Option>
           <Option name="linux24_tcp_keepalive_interval">0</Option>
-          <Option name="linux24_tcp_sack"></Option>
-          <Option name="linux24_tcp_syncookies"></Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_sack"/>
+          <Option name="linux24_tcp_syncookies"/>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">True</Option>
           <Option name="local_nat">False</Option>
           <Option name="log_all">False</Option>
@@ -7036,15 +7108,15 @@
           <Option name="log_tcp_seq">False</Option>
           <Option name="loopback_interface">lo</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"></Option>
+          <Option name="mgmt_addr"/>
           <Option name="mgmt_ssh">False</Option>
           <Option name="modules_dir">/lib/modules/`uname -r`/kernel/net/</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="prolog_place">top</Option>
-          <Option name="prolog_script"></Option>
-          <Option name="scpArgs"></Option>
-          <Option name="script_name_on_firewall"></Option>
-          <Option name="sshArgs"></Option>
+          <Option name="prolog_script"/>
+          <Option name="scpArgs"/>
+          <Option name="script_name_on_firewall"/>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -7080,65 +7152,65 @@
         <FirewallOptions>
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
-          <Option name="action_on_reject"></Option>
-          <Option name="activationCmd"></Option>
+          <Option name="action_on_reject"/>
+          <Option name="activationCmd"/>
           <Option name="add_mgmt_ssh_rule_when_stoped">False</Option>
           <Option name="add_rules_for_ipv6_neighbor_discovery">False</Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">False</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
           <Option name="classify_mark_terminating">False</Option>
           <Option name="clear_unknown_interfaces">False</Option>
-          <Option name="cmdline"></Option>
-          <Option name="compiler"></Option>
+          <Option name="cmdline"/>
+          <Option name="compiler"/>
           <Option name="configure_bonding_interfaces">False</Option>
           <Option name="configure_bridge_interfaces">False</Option>
           <Option name="configure_interfaces">True</Option>
           <Option name="configure_vlan_interfaces">False</Option>
           <Option name="debug">False</Option>
           <Option name="drop_invalid">False</Option>
-          <Option name="epilog_script"></Option>
-          <Option name="firewall_dir"></Option>
+          <Option name="epilog_script"/>
+          <Option name="firewall_dir"/>
           <Option name="firewall_is_part_of_any_and_networks">False</Option>
           <Option name="flush_and_set_default_policy">True</Option>
           <Option name="ignore_empty_groups">False</Option>
           <Option name="ipv4_6_order">ipv4_first</Option>
-          <Option name="limit_suffix"></Option>
+          <Option name="limit_suffix"/>
           <Option name="limit_value">0</Option>
-          <Option name="linux24_accept_redirects"></Option>
-          <Option name="linux24_accept_source_route"></Option>
+          <Option name="linux24_accept_redirects"/>
+          <Option name="linux24_accept_source_route"/>
           <Option name="linux24_conntrack_hashsize">0</Option>
           <Option name="linux24_conntrack_max">0</Option>
-          <Option name="linux24_conntrack_tcp_be_liberal"></Option>
-          <Option name="linux24_icmp_echo_ignore_all"></Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
-          <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
-          <Option name="linux24_ip_dynaddr"></Option>
+          <Option name="linux24_conntrack_tcp_be_liberal"/>
+          <Option name="linux24_icmp_echo_ignore_all"/>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
+          <Option name="linux24_icmp_ignore_bogus_error_responses"/>
+          <Option name="linux24_ip_dynaddr"/>
           <Option name="linux24_ip_forward">0</Option>
-          <Option name="linux24_ipv6_forward"></Option>
-          <Option name="linux24_log_martians"></Option>
-          <Option name="linux24_path_brctl"></Option>
-          <Option name="linux24_path_ifenslave"></Option>
-          <Option name="linux24_path_ip"></Option>
-          <Option name="linux24_path_ip6tables"></Option>
-          <Option name="linux24_path_ip6tables_restore"></Option>
-          <Option name="linux24_path_iptables"></Option>
-          <Option name="linux24_path_iptables_restore"></Option>
-          <Option name="linux24_path_logger"></Option>
-          <Option name="linux24_path_lsmod"></Option>
-          <Option name="linux24_path_modprobe"></Option>
-          <Option name="linux24_path_vconfig"></Option>
-          <Option name="linux24_rp_filter"></Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_ipv6_forward"/>
+          <Option name="linux24_log_martians"/>
+          <Option name="linux24_path_brctl"/>
+          <Option name="linux24_path_ifenslave"/>
+          <Option name="linux24_path_ip"/>
+          <Option name="linux24_path_ip6tables"/>
+          <Option name="linux24_path_ip6tables_restore"/>
+          <Option name="linux24_path_iptables"/>
+          <Option name="linux24_path_iptables_restore"/>
+          <Option name="linux24_path_logger"/>
+          <Option name="linux24_path_lsmod"/>
+          <Option name="linux24_path_modprobe"/>
+          <Option name="linux24_path_vconfig"/>
+          <Option name="linux24_rp_filter"/>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">0</Option>
           <Option name="linux24_tcp_keepalive_interval">0</Option>
-          <Option name="linux24_tcp_sack"></Option>
-          <Option name="linux24_tcp_syncookies"></Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_sack"/>
+          <Option name="linux24_tcp_syncookies"/>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">True</Option>
           <Option name="local_nat">False</Option>
           <Option name="log_all">False</Option>
@@ -7150,15 +7222,15 @@
           <Option name="log_tcp_seq">False</Option>
           <Option name="loopback_interface">lo</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"></Option>
+          <Option name="mgmt_addr"/>
           <Option name="mgmt_ssh">False</Option>
           <Option name="modules_dir">/lib/modules/`uname -r`/kernel/net/</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="prolog_place">top</Option>
-          <Option name="prolog_script"></Option>
-          <Option name="scpArgs"></Option>
-          <Option name="script_name_on_firewall"></Option>
-          <Option name="sshArgs"></Option>
+          <Option name="prolog_script"/>
+          <Option name="scpArgs"/>
+          <Option name="script_name_on_firewall"/>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -7198,19 +7270,19 @@
         <FirewallOptions>
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
-          <Option name="action_on_reject"></Option>
-          <Option name="activationCmd"></Option>
+          <Option name="action_on_reject"/>
+          <Option name="activationCmd"/>
           <Option name="add_mgmt_ssh_rule_when_stoped">False</Option>
           <Option name="add_rules_for_ipv6_neighbor_discovery">False</Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">False</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
           <Option name="classify_mark_terminating">False</Option>
           <Option name="clear_unknown_interfaces">False</Option>
           <Option name="cmdline">-xc</Option>
-          <Option name="compiler"></Option>
+          <Option name="compiler"/>
           <Option name="configure_bonding_interfaces">False</Option>
           <Option name="configure_bridge_interfaces">False</Option>
           <Option name="configure_interfaces">True</Option>
@@ -7218,15 +7290,15 @@
           <Option name="debug">False</Option>
           <Option name="drop_invalid">False</Option>
           <Option name="eliminate_duplicates">true</Option>
-          <Option name="epilog_script"></Option>
+          <Option name="epilog_script"/>
           <Option name="firewall_dir">/etc</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="flush_and_set_default_policy">True</Option>
           <Option name="freebsd_ip_forward">1</Option>
           <Option name="ignore_empty_groups">False</Option>
-          <Option name="ipt_mangle_only_rulesets"></Option>
+          <Option name="ipt_mangle_only_rulesets"/>
           <Option name="ipv4_6_order">ipv4_first</Option>
-          <Option name="limit_suffix"></Option>
+          <Option name="limit_suffix"/>
           <Option name="limit_value">0</Option>
           <Option name="linux24_ip_forward">1</Option>
           <Option name="load_modules">True</Option>
@@ -7241,11 +7313,11 @@
           <Option name="loopback_interface">lo</Option>
           <Option name="macosx_ip_forward">1</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"></Option>
+          <Option name="mgmt_addr"/>
           <Option name="mgmt_ssh">False</Option>
           <Option name="modules_dir">/lib/modules/`uname -r`/kernel/net/</Option>
           <Option name="openbsd_ip_forward">1</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="pf_limit_frags">5000</Option>
           <Option name="pf_limit_states">10000</Option>
           <Option name="pf_timeout_frag">30</Option>
@@ -7263,14 +7335,14 @@
           <Option name="pix_syslog_device_id_supported">false</Option>
           <Option name="pix_use_acl_remarks">true</Option>
           <Option name="prolog_place">top</Option>
-          <Option name="prolog_script"></Option>
-          <Option name="scpArgs"></Option>
-          <Option name="script_name_on_firewall"></Option>
+          <Option name="prolog_script"/>
+          <Option name="scpArgs"/>
+          <Option name="script_name_on_firewall"/>
           <Option name="secuwall_add_files">False</Option>
           <Option name="secuwall_add_files_dir">/opt/secuwall/templates/default</Option>
           <Option name="secuwall_dns_reso1">files</Option>
           <Option name="solaris_ip_forward">1</Option>
-          <Option name="sshArgs"></Option>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
diff --git a/test/ipt/objects-for-regression-tests.fwb b/test/ipt/objects-for-regression-tests.fwb
index ace33de1d..2aa504917 100644
--- a/test/ipt/objects-for-regression-tests.fwb
+++ b/test/ipt/objects-for-regression-tests.fwb
@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <!DOCTYPE FWObjectDatabase SYSTEM "fwbuilder.dtd">
-<FWObjectDatabase xmlns="http://www.fwbuilder.org/1.0/" version="17" lastModified="1297367711" id="root">
+<FWObjectDatabase xmlns="http://www.fwbuilder.org/1.0/" version="18" lastModified="1297367711" id="root">
   <Library id="syslib000" color="#d4f8ff" name="Standard" comment="Standard objects" ro="True">
     <AnyNetwork id="sysid0" name="Any" comment="Any Network" ro="False" address="0.0.0.0" netmask="0.0.0.0"/>
     <AnyIPService id="sysid1" protocol_num="0" name="Any" comment="Any IP Service" ro="False"/>
@@ -51,9 +51,9 @@
             <PolicyInstallScript arguments="" command="" enabled="False"/>
           </Management>
           <HostOptions>
-            <Option name="snmp_contact"></Option>
-            <Option name="snmp_description"></Option>
-            <Option name="snmp_location"></Option>
+            <Option name="snmp_contact"/>
+            <Option name="snmp_description"/>
+            <Option name="snmp_location"/>
             <Option name="use_mac_addr">false</Option>
             <Option name="use_mac_addr_filter">False</Option>
           </HostOptions>
@@ -69,9 +69,9 @@
             <PolicyInstallScript arguments="" command="" enabled="False"/>
           </Management>
           <HostOptions>
-            <Option name="snmp_contact"></Option>
-            <Option name="snmp_description"></Option>
-            <Option name="snmp_location"></Option>
+            <Option name="snmp_contact"/>
+            <Option name="snmp_description"/>
+            <Option name="snmp_location"/>
             <Option name="use_mac_addr">false</Option>
             <Option name="use_mac_addr_filter">False</Option>
           </HostOptions>
@@ -100,17 +100,17 @@
     </ObjectGroup>
     <ServiceGroup id="stdid05" name="Services" comment="" ro="False">
       <CustomService id="stdid14_1" name="ESTABLISHED" comment="This service matches all packets which are part of network connections established through the firewall, or connections 'related' to those established through the firewall. Term 'established' refers to the state tracking mechanism which exists inside iptables and other stateful firewalls and does not mean any particular combination of packet header options. Packet is considered to correspond to the state 'ESTABLISHED' if it belongs to the network session, for which proper initiation has been seen by the firewall, so its stateful inspection module made appropriate record in the state table. Usually stateful firewalls keep track of network connections using not only tcp protocol, but also udp and sometimes even icmp protocols. 'RELATED' describes packet belonging to a separate network connection, related to the session firewall is keeping track of. One example is FTP command and FTP data sessions." ro="False" protocol="any" address_family="ipv4">
-        <CustomServiceCommand platform="Undefined"></CustomServiceCommand>
+        <CustomServiceCommand platform="Undefined"/>
         <CustomServiceCommand platform="iosacl">established</CustomServiceCommand>
-        <CustomServiceCommand platform="ipfilter"></CustomServiceCommand>
+        <CustomServiceCommand platform="ipfilter"/>
         <CustomServiceCommand platform="ipfw">established</CustomServiceCommand>
         <CustomServiceCommand platform="iptables">-m state --state ESTABLISHED,RELATED</CustomServiceCommand>
         <CustomServiceCommand platform="procurve_acl">established</CustomServiceCommand>
       </CustomService>
       <CustomService id="stdid14_2" name="ESTABLISHED ipv6" comment="This service matches all packets which are part of network connections established through the firewall, or connections 'related' to those established through the firewall. Term 'established' refers to the state tracking mechanism which exists inside iptables and other stateful firewalls and does not mean any particular combination of packet header options. Packet is considered to correspond to the state 'ESTABLISHED' if it belongs to the network session, for which proper initiation has been seen by the firewall, so its stateful inspection module made appropriate record in the state table. Usually stateful firewalls keep track of network connections using not only tcp protocol, but also udp and sometimes even icmp protocols. 'RELATED' describes packet belonging to a separate network connection, related to the session firewall is keeping track of. One example is FTP command and FTP data sessions." ro="False" protocol="any" address_family="ipv6">
-        <CustomServiceCommand platform="Undefined"></CustomServiceCommand>
+        <CustomServiceCommand platform="Undefined"/>
         <CustomServiceCommand platform="iosacl">established</CustomServiceCommand>
-        <CustomServiceCommand platform="ipfilter"></CustomServiceCommand>
+        <CustomServiceCommand platform="ipfilter"/>
         <CustomServiceCommand platform="ipfw">established</CustomServiceCommand>
         <CustomServiceCommand platform="iptables">-m state --state ESTABLISHED,RELATED</CustomServiceCommand>
         <CustomServiceCommand platform="procurve_acl">established</CustomServiceCommand>
@@ -360,54 +360,54 @@
       </ServiceGroup>
       <ServiceGroup id="stdid13" name="Custom" comment="" ro="False">
         <CustomService id="id3B64EEA8" name="rpc" comment="works in iptables and requires patch-o-matic.&#10;For more information look for patch-o-matic on http://www.netfilter.org/" ro="False" protocol="any" address_family="ipv4">
-          <CustomServiceCommand platform="Undefined"></CustomServiceCommand>
-          <CustomServiceCommand platform="ipf"></CustomServiceCommand>
-          <CustomServiceCommand platform="ipfilter"></CustomServiceCommand>
-          <CustomServiceCommand platform="ipfw"></CustomServiceCommand>
+          <CustomServiceCommand platform="Undefined"/>
+          <CustomServiceCommand platform="ipf"/>
+          <CustomServiceCommand platform="ipfilter"/>
+          <CustomServiceCommand platform="ipfw"/>
           <CustomServiceCommand platform="iptables">-m record_rpc</CustomServiceCommand>
-          <CustomServiceCommand platform="pf"></CustomServiceCommand>
-          <CustomServiceCommand platform="pix"></CustomServiceCommand>
-          <CustomServiceCommand platform="unknown"></CustomServiceCommand>
+          <CustomServiceCommand platform="pf"/>
+          <CustomServiceCommand platform="pix"/>
+          <CustomServiceCommand platform="unknown"/>
         </CustomService>
         <CustomService id="id3B64EF4E" name="irc-conn" comment="IRC connection tracker, supports DCC.&#10;Works on iptables and requires patch-o-matic.&#10;For more information look for patch-o-matic on http://www.netfilter.org/&#10;" ro="False" protocol="any" address_family="ipv4">
-          <CustomServiceCommand platform="Undefined"></CustomServiceCommand>
-          <CustomServiceCommand platform="ipf"></CustomServiceCommand>
-          <CustomServiceCommand platform="ipfilter"></CustomServiceCommand>
-          <CustomServiceCommand platform="ipfw"></CustomServiceCommand>
+          <CustomServiceCommand platform="Undefined"/>
+          <CustomServiceCommand platform="ipf"/>
+          <CustomServiceCommand platform="ipfilter"/>
+          <CustomServiceCommand platform="ipfw"/>
           <CustomServiceCommand platform="iptables">-m irc</CustomServiceCommand>
-          <CustomServiceCommand platform="pf"></CustomServiceCommand>
-          <CustomServiceCommand platform="pix"></CustomServiceCommand>
-          <CustomServiceCommand platform="unknown"></CustomServiceCommand>
+          <CustomServiceCommand platform="pf"/>
+          <CustomServiceCommand platform="pix"/>
+          <CustomServiceCommand platform="unknown"/>
         </CustomService>
         <CustomService id="id3B64EF50" name="psd" comment="Port scan detector, works only on iptables and  requires patch-o-matic &#10;For more information look for patch-o-matic on http://www.netfilter.org/" ro="False" protocol="any" address_family="ipv4">
-          <CustomServiceCommand platform="Undefined"></CustomServiceCommand>
-          <CustomServiceCommand platform="ipf"></CustomServiceCommand>
-          <CustomServiceCommand platform="ipfilter"></CustomServiceCommand>
-          <CustomServiceCommand platform="ipfw"></CustomServiceCommand>
+          <CustomServiceCommand platform="Undefined"/>
+          <CustomServiceCommand platform="ipf"/>
+          <CustomServiceCommand platform="ipfilter"/>
+          <CustomServiceCommand platform="ipfw"/>
           <CustomServiceCommand platform="iptables">-m psd --psd-weight-threshold 5 --psd-delay-threshold 10000</CustomServiceCommand>
-          <CustomServiceCommand platform="pf"></CustomServiceCommand>
-          <CustomServiceCommand platform="pix"></CustomServiceCommand>
-          <CustomServiceCommand platform="unknown"></CustomServiceCommand>
+          <CustomServiceCommand platform="pf"/>
+          <CustomServiceCommand platform="pix"/>
+          <CustomServiceCommand platform="unknown"/>
         </CustomService>
         <CustomService id="id3B64EF52" name="string" comment="Matches a string in a whole packet, works in iptables and requires patch-o-matic.&#10;For more information look for patch-o-matic on http://www.netfilter.org/" ro="False" protocol="any" address_family="ipv4">
-          <CustomServiceCommand platform="Undefined"></CustomServiceCommand>
-          <CustomServiceCommand platform="ipf"></CustomServiceCommand>
-          <CustomServiceCommand platform="ipfilter"></CustomServiceCommand>
-          <CustomServiceCommand platform="ipfw"></CustomServiceCommand>
+          <CustomServiceCommand platform="Undefined"/>
+          <CustomServiceCommand platform="ipf"/>
+          <CustomServiceCommand platform="ipfilter"/>
+          <CustomServiceCommand platform="ipfw"/>
           <CustomServiceCommand platform="iptables">-m string --string test_pattern</CustomServiceCommand>
-          <CustomServiceCommand platform="pf"></CustomServiceCommand>
-          <CustomServiceCommand platform="pix"></CustomServiceCommand>
-          <CustomServiceCommand platform="unknown"></CustomServiceCommand>
+          <CustomServiceCommand platform="pf"/>
+          <CustomServiceCommand platform="pix"/>
+          <CustomServiceCommand platform="unknown"/>
         </CustomService>
         <CustomService id="id3B64EF54" name="talk" comment="Talk protocol support. Works in iptables and requires patch-o-matic.&#10;For more information look for patch-o-matic on http://www.netfilter.org/" ro="False" protocol="any" address_family="ipv4">
-          <CustomServiceCommand platform="Undefined"></CustomServiceCommand>
-          <CustomServiceCommand platform="ipf"></CustomServiceCommand>
-          <CustomServiceCommand platform="ipfilter"></CustomServiceCommand>
-          <CustomServiceCommand platform="ipfw"></CustomServiceCommand>
+          <CustomServiceCommand platform="Undefined"/>
+          <CustomServiceCommand platform="ipf"/>
+          <CustomServiceCommand platform="ipfilter"/>
+          <CustomServiceCommand platform="ipfw"/>
           <CustomServiceCommand platform="iptables">-m talk</CustomServiceCommand>
-          <CustomServiceCommand platform="pf"></CustomServiceCommand>
-          <CustomServiceCommand platform="pix"></CustomServiceCommand>
-          <CustomServiceCommand platform="unknown"></CustomServiceCommand>
+          <CustomServiceCommand platform="pf"/>
+          <CustomServiceCommand platform="pix"/>
+          <CustomServiceCommand platform="unknown"/>
         </CustomService>
       </ServiceGroup>
       <ServiceGroup id="stdid19" name="TagServices" comment="" ro="False"/>
@@ -429,89 +429,101 @@
     <Firewall id="id41D294BB" host_OS="linux24" lastCompiled="0" lastInstalled="0" lastModified="0" platform="iptables" version="" name="firewall30" comment="dynamic wildcard interface with a dot in the name" ro="False">
       <NAT id="id41D2953D" name="NAT" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="True">
         <NATRule id="id41D2953E" disabled="False" group="" position="0" action="Translate" comment="">
-          <OSrc neg="False">
+            <OSrc neg="False">
             <ObjectRef ref="net-Internal_net"/>
           </OSrc>
-          <ODst neg="False">
+            <ODst neg="False">
             <ObjectRef ref="sysid0"/>
           </ODst>
-          <OSrv neg="False">
+            <OSrv neg="False">
             <ServiceRef ref="sysid1"/>
           </OSrv>
-          <TSrc neg="False">
+            <TSrc neg="False">
             <ObjectRef ref="sysid0"/>
           </TSrc>
-          <TDst neg="False">
+            <TDst neg="False">
             <ObjectRef ref="sysid0"/>
           </TDst>
-          <TSrv neg="False">
+            <TSrv neg="False">
             <ServiceRef ref="sysid1"/>
           </TSrv>
-          <NATRuleOptions/>
-        </NATRule>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
+            <NATRuleOptions/>
+          </NATRule>
         <NATRule id="id41D2954C" disabled="False" group="" position="1" action="Translate" comment="">
-          <OSrc neg="False">
+            <OSrc neg="False">
             <ObjectRef ref="net-Internal_net"/>
           </OSrc>
-          <ODst neg="False">
+            <ODst neg="False">
             <ObjectRef ref="sysid0"/>
           </ODst>
-          <OSrv neg="False">
+            <OSrv neg="False">
             <ServiceRef ref="sysid1"/>
           </OSrv>
-          <TSrc neg="False">
+            <TSrc neg="False">
             <ObjectRef ref="id3AFADBF9"/>
           </TSrc>
-          <TDst neg="False">
+            <TDst neg="False">
             <ObjectRef ref="sysid0"/>
           </TDst>
-          <TSrv neg="False">
+            <TSrv neg="False">
             <ServiceRef ref="sysid1"/>
           </TSrv>
-          <NATRuleOptions/>
-        </NATRule>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
+            <NATRuleOptions/>
+          </NATRule>
         <NATRule id="id41D2955A" disabled="False" group="" position="2" action="Translate" comment="">
-          <OSrc neg="False">
+            <OSrc neg="False">
             <ObjectRef ref="sysid0"/>
           </OSrc>
-          <ODst neg="False">
+            <ODst neg="False">
             <ObjectRef ref="sysid0"/>
           </ODst>
-          <OSrv neg="False">
+            <OSrv neg="False">
             <ServiceRef ref="tcp-SSH"/>
           </OSrv>
-          <TSrc neg="False">
+            <TSrc neg="False">
             <ObjectRef ref="sysid0"/>
           </TSrc>
-          <TDst neg="False">
+            <TDst neg="False">
             <ObjectRef ref="host-hostA"/>
           </TDst>
-          <TSrv neg="False">
+            <TSrv neg="False">
             <ServiceRef ref="tcp-SSH"/>
           </TSrv>
-          <NATRuleOptions/>
-        </NATRule>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
+            <NATRuleOptions/>
+          </NATRule>
         <NATRule id="id41D29568" disabled="False" group="" position="3" action="Translate" comment="">
-          <OSrc neg="False">
+            <OSrc neg="False">
             <ObjectRef ref="net-Internal_net"/>
           </OSrc>
-          <ODst neg="True">
+            <ODst neg="True">
             <ObjectRef ref="id3B19C5EB"/>
           </ODst>
-          <OSrv neg="False">
+            <OSrv neg="False">
             <ServiceRef ref="sysid1"/>
           </OSrv>
-          <TSrc neg="False">
+            <TSrc neg="False">
             <ObjectRef ref="sysid0"/>
           </TSrc>
-          <TDst neg="False">
+            <TDst neg="False">
             <ObjectRef ref="id3D151943"/>
           </TDst>
-          <TSrv neg="False">
+            <TSrv neg="False">
             <ServiceRef ref="sysid1"/>
           </TSrv>
-          <NATRuleOptions/>
-        </NATRule>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
+            <NATRuleOptions/>
+          </NATRule>
         <RuleSetOptions/>
       </NAT>
       <Policy id="id41D294C0" name="Policy" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="True">
@@ -652,7 +664,7 @@
             <IntervalRef ref="sysid2"/>
           </When>
           <PolicyRuleOptions>
-            <Option name="id"></Option>
+            <Option name="id"/>
           </PolicyRuleOptions>
         </PolicyRule>
         <PolicyRule id="id41D294CB" disabled="False" group="" log="False" position="7" action="Accept" direction="Both" comment="">
@@ -856,11 +868,11 @@
             <IntervalRef ref="sysid2"/>
           </When>
           <PolicyRuleOptions>
-            <Option name="action_on_reject"></Option>
-            <Option name="id"></Option>
-            <Option name="limit_suffix"></Option>
+            <Option name="action_on_reject"/>
+            <Option name="id"/>
+            <Option name="limit_suffix"/>
             <Option name="limit_value">0</Option>
-            <Option name="log_prefix"></Option>
+            <Option name="log_prefix"/>
             <Option name="stateless">True</Option>
           </PolicyRuleOptions>
         </PolicyRule>
@@ -889,74 +901,74 @@
         <Option name="accept_established">True</Option>
         <Option name="accept_new_tcp_with_no_syn">True</Option>
         <Option name="action_on_reject">ICMP host prohibited</Option>
-        <Option name="activationCmd"></Option>
-        <Option name="admUser"></Option>
-        <Option name="altAddress"></Option>
+        <Option name="activationCmd"/>
+        <Option name="admUser"/>
+        <Option name="altAddress"/>
         <Option name="bridging_fw">False</Option>
         <Option name="check_shading">False</Option>
         <Option name="clamp_mss_to_mtu">False</Option>
-        <Option name="cmdline"></Option>
-        <Option name="compiler"></Option>
+        <Option name="cmdline"/>
+        <Option name="compiler"/>
         <Option name="configure_interfaces">True</Option>
         <Option name="debug">False</Option>
         <Option name="drop_invalid">False</Option>
         <Option name="dyn_addr">False</Option>
-        <Option name="epilog_script"></Option>
-        <Option name="firewall_dir"></Option>
+        <Option name="epilog_script"/>
+        <Option name="firewall_dir"/>
         <Option name="firewall_is_part_of_any">True</Option>
         <Option name="firewall_is_part_of_any_and_networks">True</Option>
-        <Option name="id"></Option>
+        <Option name="id"/>
         <Option name="ignore_empty_groups">False</Option>
-        <Option name="install_script"></Option>
+        <Option name="install_script"/>
         <Option name="limit_suffix">/day</Option>
         <Option name="limit_value">0</Option>
-        <Option name="linux24_accept_redirects"></Option>
-        <Option name="linux24_accept_source_route"></Option>
-        <Option name="linux24_icmp_echo_ignore_all"></Option>
-        <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
-        <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
-        <Option name="linux24_ip_dynaddr"></Option>
-        <Option name="linux24_ip_forward"></Option>
-        <Option name="linux24_log_martians"></Option>
-        <Option name="linux24_path_ip"></Option>
-        <Option name="linux24_path_iptables"></Option>
-        <Option name="linux24_path_logger"></Option>
-        <Option name="linux24_path_lsmod"></Option>
-        <Option name="linux24_path_modprobe"></Option>
-        <Option name="linux24_rp_filter"></Option>
-        <Option name="linux24_tcp_ecn"></Option>
-        <Option name="linux24_tcp_fack"></Option>
+        <Option name="linux24_accept_redirects"/>
+        <Option name="linux24_accept_source_route"/>
+        <Option name="linux24_icmp_echo_ignore_all"/>
+        <Option name="linux24_icmp_echo_ignore_broadcasts"/>
+        <Option name="linux24_icmp_ignore_bogus_error_responses"/>
+        <Option name="linux24_ip_dynaddr"/>
+        <Option name="linux24_ip_forward"/>
+        <Option name="linux24_log_martians"/>
+        <Option name="linux24_path_ip"/>
+        <Option name="linux24_path_iptables"/>
+        <Option name="linux24_path_logger"/>
+        <Option name="linux24_path_lsmod"/>
+        <Option name="linux24_path_modprobe"/>
+        <Option name="linux24_rp_filter"/>
+        <Option name="linux24_tcp_ecn"/>
+        <Option name="linux24_tcp_fack"/>
         <Option name="linux24_tcp_fin_timeout">30</Option>
         <Option name="linux24_tcp_keepalive_interval">1800</Option>
-        <Option name="linux24_tcp_sack"></Option>
-        <Option name="linux24_tcp_syncookies"></Option>
-        <Option name="linux24_tcp_timestamps"></Option>
-        <Option name="linux24_tcp_window_scaling"></Option>
+        <Option name="linux24_tcp_sack"/>
+        <Option name="linux24_tcp_syncookies"/>
+        <Option name="linux24_tcp_timestamps"/>
+        <Option name="linux24_tcp_window_scaling"/>
         <Option name="load_modules">False</Option>
         <Option name="local_nat">False</Option>
         <Option name="log_all">False</Option>
         <Option name="log_all_dropped">False</Option>
         <Option name="log_invalid">False</Option>
         <Option name="log_ip_opt">False</Option>
-        <Option name="log_level"></Option>
-        <Option name="log_limit_suffix"></Option>
+        <Option name="log_level"/>
+        <Option name="log_limit_suffix"/>
         <Option name="log_limit_value">0</Option>
-        <Option name="log_prefix"></Option>
+        <Option name="log_prefix"/>
         <Option name="log_tcp_opt">False</Option>
         <Option name="log_tcp_seq">False</Option>
         <Option name="manage_virtual_addr">True</Option>
-        <Option name="mgmt_addr"></Option>
+        <Option name="mgmt_addr"/>
         <Option name="mgmt_ssh">False</Option>
         <Option name="no_iochains_for_any">False</Option>
         <Option name="no_optimisation">False</Option>
-        <Option name="output_file"></Option>
+        <Option name="output_file"/>
         <Option name="platform">iptables</Option>
         <Option name="prolog_place">top</Option>
-        <Option name="prolog_script"></Option>
-        <Option name="script_env_path"></Option>
-        <Option name="snmp_contact"></Option>
-        <Option name="snmp_description"></Option>
-        <Option name="snmp_location"></Option>
+        <Option name="prolog_script"/>
+        <Option name="script_env_path"/>
+        <Option name="snmp_contact"/>
+        <Option name="snmp_description"/>
+        <Option name="snmp_location"/>
         <Option name="ulog_cprange">0</Option>
         <Option name="ulog_nlgroup">1</Option>
         <Option name="ulog_qthreshold">1</Option>
@@ -1591,8 +1603,8 @@
         <Option name="bridging_fw">False</Option>
         <Option name="check_shading">True</Option>
         <Option name="clamp_mss_to_mtu">False</Option>
-        <Option name="cmdline"></Option>
-        <Option name="compiler"></Option>
+        <Option name="cmdline"/>
+        <Option name="compiler"/>
         <Option name="configure_interfaces">True</Option>
         <Option name="debug">False</Option>
         <Option name="dyn_addr">False</Option>
@@ -1600,28 +1612,28 @@
         <Option name="ignore_empty_groups">False</Option>
         <Option name="limit_suffix">/day</Option>
         <Option name="limit_value">0</Option>
-        <Option name="linux24_accept_redirects"></Option>
-        <Option name="linux24_accept_source_route"></Option>
-        <Option name="linux24_icmp_echo_ignore_all"></Option>
-        <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
-        <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
-        <Option name="linux24_ip_dynaddr"></Option>
-        <Option name="linux24_ip_forward"></Option>
-        <Option name="linux24_log_martians"></Option>
-        <Option name="linux24_path_ip"></Option>
-        <Option name="linux24_path_iptables"></Option>
-        <Option name="linux24_path_logger"></Option>
-        <Option name="linux24_path_lsmod"></Option>
-        <Option name="linux24_path_modprobe"></Option>
-        <Option name="linux24_rp_filter"></Option>
-        <Option name="linux24_tcp_ecn"></Option>
-        <Option name="linux24_tcp_fack"></Option>
+        <Option name="linux24_accept_redirects"/>
+        <Option name="linux24_accept_source_route"/>
+        <Option name="linux24_icmp_echo_ignore_all"/>
+        <Option name="linux24_icmp_echo_ignore_broadcasts"/>
+        <Option name="linux24_icmp_ignore_bogus_error_responses"/>
+        <Option name="linux24_ip_dynaddr"/>
+        <Option name="linux24_ip_forward"/>
+        <Option name="linux24_log_martians"/>
+        <Option name="linux24_path_ip"/>
+        <Option name="linux24_path_iptables"/>
+        <Option name="linux24_path_logger"/>
+        <Option name="linux24_path_lsmod"/>
+        <Option name="linux24_path_modprobe"/>
+        <Option name="linux24_rp_filter"/>
+        <Option name="linux24_tcp_ecn"/>
+        <Option name="linux24_tcp_fack"/>
         <Option name="linux24_tcp_fin_timeout">30</Option>
         <Option name="linux24_tcp_keepalive_interval">1800</Option>
-        <Option name="linux24_tcp_sack"></Option>
-        <Option name="linux24_tcp_syncookies"></Option>
-        <Option name="linux24_tcp_timestamps"></Option>
-        <Option name="linux24_tcp_window_scaling"></Option>
+        <Option name="linux24_tcp_sack"/>
+        <Option name="linux24_tcp_syncookies"/>
+        <Option name="linux24_tcp_timestamps"/>
+        <Option name="linux24_tcp_window_scaling"/>
         <Option name="load_modules">True</Option>
         <Option name="local_nat">False</Option>
         <Option name="log_all">False</Option>
@@ -1633,10 +1645,10 @@
         <Option name="log_tcp_seq">False</Option>
         <Option name="manage_virtual_addr">True</Option>
         <Option name="no_optimisation">False</Option>
-        <Option name="script_env_path"></Option>
-        <Option name="snmp_contact"></Option>
-        <Option name="snmp_description"></Option>
-        <Option name="snmp_location"></Option>
+        <Option name="script_env_path"/>
+        <Option name="snmp_contact"/>
+        <Option name="snmp_description"/>
+        <Option name="snmp_location"/>
         <Option name="ulog_cprange">0</Option>
         <Option name="ulog_nlgroup">1</Option>
         <Option name="ulog_qthreshold">1</Option>
@@ -1648,131 +1660,149 @@
     <Firewall id="id44530X92250" host_OS="linux24" inactive="False" lastCompiled="1247604231" lastInstalled="0" lastModified="1247615721" platform="iptables" version="1.4.3" name="firewall72-base" comment="this object is used to test all kinds of single object&#10;negation in policy and NAT rules&#10;&#10;Iptables version 1.4.3 for extrapositioned negation&#10;" ro="False">
       <NAT id="id45091X92250" name="NAT" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="True">
         <NATRule id="id45120X92250" disabled="False" group="" position="0" action="Translate" comment="">
-          <OSrc neg="True">
+            <OSrc neg="True">
             <ObjectRef ref="net-Internal_net"/>
           </OSrc>
-          <ODst neg="False">
+            <ODst neg="False">
             <ObjectRef ref="id3B19C5EB"/>
           </ODst>
-          <OSrv neg="False">
+            <OSrv neg="False">
             <ServiceRef ref="sysid1"/>
           </OSrv>
-          <TSrc neg="False">
+            <TSrc neg="False">
             <ObjectRef ref="id3AFADBF9"/>
           </TSrc>
-          <TDst neg="False">
+            <TDst neg="False">
             <ObjectRef ref="sysid0"/>
           </TDst>
-          <TSrv neg="False">
+            <TSrv neg="False">
             <ServiceRef ref="sysid1"/>
           </TSrv>
-          <NATRuleOptions/>
-        </NATRule>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
+            <NATRuleOptions/>
+          </NATRule>
         <NATRule id="id45134X92250" disabled="False" group="" position="1" action="Translate" comment="">
-          <OSrc neg="True">
+            <OSrc neg="True">
             <ObjectRef ref="net-Internal_net"/>
           </OSrc>
-          <ODst neg="False">
+            <ODst neg="False">
             <ObjectRef ref="id3B19C5EB"/>
           </ODst>
-          <OSrv neg="False">
+            <OSrv neg="False">
             <ServiceRef ref="tcp-HTTP"/>
           </OSrv>
-          <TSrc neg="False">
+            <TSrc neg="False">
             <ObjectRef ref="id3AFADBF9"/>
           </TSrc>
-          <TDst neg="False">
+            <TDst neg="False">
             <ObjectRef ref="sysid0"/>
           </TDst>
-          <TSrv neg="False">
+            <TSrv neg="False">
             <ServiceRef ref="tcp-HTTP"/>
           </TSrv>
-          <NATRuleOptions/>
-        </NATRule>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
+            <NATRuleOptions/>
+          </NATRule>
         <NATRule id="id45177X92250" disabled="False" group="" position="2" action="Translate" comment="">
-          <OSrc neg="False">
+            <OSrc neg="False">
             <ObjectRef ref="net-Internal_net"/>
           </OSrc>
-          <ODst neg="True">
+            <ODst neg="True">
             <ObjectRef ref="id3B022266"/>
           </ODst>
-          <OSrv neg="False">
+            <OSrv neg="False">
             <ServiceRef ref="sysid1"/>
           </OSrv>
-          <TSrc neg="False">
+            <TSrc neg="False">
             <ObjectRef ref="sysid0"/>
           </TSrc>
-          <TDst neg="False">
+            <TDst neg="False">
             <ObjectRef ref="sysid0"/>
           </TDst>
-          <TSrv neg="False">
+            <TSrv neg="False">
             <ServiceRef ref="sysid1"/>
           </TSrv>
-          <NATRuleOptions/>
-        </NATRule>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
+            <NATRuleOptions/>
+          </NATRule>
         <NATRule id="id45191X92250" disabled="False" group="" position="3" action="Translate" comment="">
-          <OSrc neg="False">
+            <OSrc neg="False">
             <ObjectRef ref="net-Internal_net"/>
           </OSrc>
-          <ODst neg="True">
+            <ODst neg="True">
             <ObjectRef ref="id3B022266"/>
           </ODst>
-          <OSrv neg="False">
+            <OSrv neg="False">
             <ServiceRef ref="tcp-HTTP"/>
           </OSrv>
-          <TSrc neg="False">
+            <TSrc neg="False">
             <ObjectRef ref="sysid0"/>
           </TSrc>
-          <TDst neg="False">
+            <TDst neg="False">
             <ObjectRef ref="sysid0"/>
           </TDst>
-          <TSrv neg="False">
+            <TSrv neg="False">
             <ServiceRef ref="tcp-HTTP"/>
           </TSrv>
-          <NATRuleOptions/>
-        </NATRule>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
+            <NATRuleOptions/>
+          </NATRule>
         <NATRule id="id45205X92250" disabled="False" group="" position="4" action="Translate" comment="">
-          <OSrc neg="False">
+            <OSrc neg="False">
             <ObjectRef ref="net-Internal_net"/>
           </OSrc>
-          <ODst neg="True">
+            <ODst neg="True">
             <ObjectRef ref="id3BBC0EFC"/>
           </ODst>
-          <OSrv neg="False">
+            <OSrv neg="False">
             <ServiceRef ref="sysid1"/>
           </OSrv>
-          <TSrc neg="False">
+            <TSrc neg="False">
             <ObjectRef ref="sysid0"/>
           </TSrc>
-          <TDst neg="False">
+            <TDst neg="False">
             <ObjectRef ref="sysid0"/>
           </TDst>
-          <TSrv neg="False">
+            <TSrv neg="False">
             <ServiceRef ref="sysid1"/>
           </TSrv>
-          <NATRuleOptions/>
-        </NATRule>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
+            <NATRuleOptions/>
+          </NATRule>
         <NATRule id="id45262X92250" disabled="False" group="" position="5" action="Translate" comment="">
-          <OSrc neg="False">
+            <OSrc neg="False">
             <ObjectRef ref="net-Internal_net"/>
           </OSrc>
-          <ODst neg="True">
+            <ODst neg="True">
             <ObjectRef ref="id3AFC191C"/>
           </ODst>
-          <OSrv neg="False">
+            <OSrv neg="False">
             <ServiceRef ref="tcp-HTTP"/>
           </OSrv>
-          <TSrc neg="False">
+            <TSrc neg="False">
             <ObjectRef ref="sysid0"/>
           </TSrc>
-          <TDst neg="False">
+            <TDst neg="False">
             <ObjectRef ref="sysid0"/>
           </TDst>
-          <TSrv neg="False">
+            <TSrv neg="False">
             <ServiceRef ref="id3B5009F7"/>
           </TSrv>
-          <NATRuleOptions/>
-        </NATRule>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
+            <NATRuleOptions/>
+          </NATRule>
         <RuleSetOptions/>
       </NAT>
       <Policy id="id44536X92250" name="fw72-base-policy" comment="" ro="False" ipv4_rule_set="True" ipv6_rule_set="False" top_rule_set="True">
@@ -2082,51 +2112,51 @@
         <Option name="accept_established">True</Option>
         <Option name="accept_new_tcp_with_no_syn">True</Option>
         <Option name="action_on_reject">ICMP net unreachable</Option>
-        <Option name="activationCmd"></Option>
-        <Option name="admUser"></Option>
-        <Option name="altAddress"></Option>
+        <Option name="activationCmd"/>
+        <Option name="admUser"/>
+        <Option name="altAddress"/>
         <Option name="bridging_fw">False</Option>
         <Option name="check_shading">True</Option>
         <Option name="clamp_mss_to_mtu">False</Option>
-        <Option name="cmdline"></Option>
-        <Option name="compiler"></Option>
+        <Option name="cmdline"/>
+        <Option name="compiler"/>
         <Option name="configure_interfaces">True</Option>
         <Option name="debug">False</Option>
         <Option name="drop_invalid">True</Option>
         <Option name="dyn_addr">False</Option>
-        <Option name="epilog_script"></Option>
-        <Option name="firewall_dir"></Option>
+        <Option name="epilog_script"/>
+        <Option name="firewall_dir"/>
         <Option name="firewall_is_part_of_any">True</Option>
         <Option name="firewall_is_part_of_any_and_networks">True</Option>
         <Option name="ignore_empty_groups">False</Option>
-        <Option name="inst_cmdline"></Option>
-        <Option name="inst_script"></Option>
-        <Option name="install_script"></Option>
-        <Option name="ipt_mangle_only_rulesets"></Option>
+        <Option name="inst_cmdline"/>
+        <Option name="inst_script"/>
+        <Option name="install_script"/>
+        <Option name="ipt_mangle_only_rulesets"/>
         <Option name="limit_suffix">/second</Option>
         <Option name="limit_value">0</Option>
-        <Option name="linux24_accept_redirects"></Option>
-        <Option name="linux24_accept_source_route"></Option>
-        <Option name="linux24_icmp_echo_ignore_all"></Option>
-        <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
-        <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
-        <Option name="linux24_ip_dynaddr"></Option>
-        <Option name="linux24_ip_forward"></Option>
-        <Option name="linux24_log_martians"></Option>
-        <Option name="linux24_path_ip"></Option>
-        <Option name="linux24_path_iptables"></Option>
-        <Option name="linux24_path_logger"></Option>
-        <Option name="linux24_path_lsmod"></Option>
-        <Option name="linux24_path_modprobe"></Option>
-        <Option name="linux24_rp_filter"></Option>
-        <Option name="linux24_tcp_ecn"></Option>
-        <Option name="linux24_tcp_fack"></Option>
+        <Option name="linux24_accept_redirects"/>
+        <Option name="linux24_accept_source_route"/>
+        <Option name="linux24_icmp_echo_ignore_all"/>
+        <Option name="linux24_icmp_echo_ignore_broadcasts"/>
+        <Option name="linux24_icmp_ignore_bogus_error_responses"/>
+        <Option name="linux24_ip_dynaddr"/>
+        <Option name="linux24_ip_forward"/>
+        <Option name="linux24_log_martians"/>
+        <Option name="linux24_path_ip"/>
+        <Option name="linux24_path_iptables"/>
+        <Option name="linux24_path_logger"/>
+        <Option name="linux24_path_lsmod"/>
+        <Option name="linux24_path_modprobe"/>
+        <Option name="linux24_rp_filter"/>
+        <Option name="linux24_tcp_ecn"/>
+        <Option name="linux24_tcp_fack"/>
         <Option name="linux24_tcp_fin_timeout">30</Option>
         <Option name="linux24_tcp_keepalive_interval">1800</Option>
-        <Option name="linux24_tcp_sack"></Option>
-        <Option name="linux24_tcp_syncookies"></Option>
-        <Option name="linux24_tcp_timestamps"></Option>
-        <Option name="linux24_tcp_window_scaling"></Option>
+        <Option name="linux24_tcp_sack"/>
+        <Option name="linux24_tcp_syncookies"/>
+        <Option name="linux24_tcp_timestamps"/>
+        <Option name="linux24_tcp_window_scaling"/>
         <Option name="load_modules">False</Option>
         <Option name="local_nat">False</Option>
         <Option name="log_all">False</Option>
@@ -2136,24 +2166,24 @@
         <Option name="log_level">debug</Option>
         <Option name="log_limit_suffix">/second</Option>
         <Option name="log_limit_value">0</Option>
-        <Option name="log_prefix"></Option>
+        <Option name="log_prefix"/>
         <Option name="log_tcp_opt">False</Option>
         <Option name="log_tcp_seq">False</Option>
         <Option name="manage_virtual_addr">True</Option>
-        <Option name="mgmt_addr"></Option>
+        <Option name="mgmt_addr"/>
         <Option name="mgmt_ssh">False</Option>
         <Option name="no_iochains_for_any">False</Option>
         <Option name="no_optimisation">False</Option>
-        <Option name="output_file"></Option>
+        <Option name="output_file"/>
         <Option name="platform">iptables</Option>
         <Option name="prolog_place">after_interfaces</Option>
-        <Option name="prolog_script"></Option>
+        <Option name="prolog_script"/>
         <Option name="proxy_arp">False</Option>
-        <Option name="script_env_path"></Option>
-        <Option name="snmp_contact"></Option>
-        <Option name="snmp_description"></Option>
-        <Option name="snmp_location"></Option>
-        <Option name="sshArgs"></Option>
+        <Option name="script_env_path"/>
+        <Option name="snmp_contact"/>
+        <Option name="snmp_description"/>
+        <Option name="snmp_location"/>
+        <Option name="sshArgs"/>
         <Option name="ulog_cprange">0</Option>
         <Option name="ulog_nlgroup">1</Option>
         <Option name="ulog_qthreshold">1</Option>
@@ -2194,1097 +2224,1244 @@
     <Firewall id="id2999465X89754" host_OS="linux24" inactive="False" lastCompiled="1251648690" lastInstalled="1142003872" lastModified="1270840550" platform="iptables" version="" name="firewall2-6" comment="this object has several interfaces and tests different  SNAT rules. This object also has unnumbered interface ipsec0&#10;" ro="False">
       <NAT id="id2999876X89754" name="NAT" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="True">
         <NATRule id="id2999877X89754" disabled="False" group="" position="0" action="Translate" comment="">
-          <OSrc neg="False">
+            <OSrc neg="False">
             <ObjectRef ref="net-Internal_net"/>
           </OSrc>
-          <ODst neg="False">
+            <ODst neg="False">
             <ObjectRef ref="sysid0"/>
           </ODst>
-          <OSrv neg="False">
+            <OSrv neg="False">
             <ServiceRef ref="sysid1"/>
           </OSrv>
-          <TSrc neg="False">
+            <TSrc neg="False">
             <ObjectRef ref="sysid0"/>
           </TSrc>
-          <TDst neg="False">
+            <TDst neg="False">
             <ObjectRef ref="sysid0"/>
           </TDst>
-          <TSrv neg="False">
+            <TSrv neg="False">
             <ServiceRef ref="sysid1"/>
           </TSrv>
-          <NATRuleOptions>
-            <Option name="id"></Option>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
+            <NATRuleOptions>
+            <Option name="id"/>
           </NATRuleOptions>
-        </NATRule>
+          </NATRule>
         <NATRule id="id2999891X89754" disabled="False" group="" position="1" action="Translate" comment="">
-          <OSrc neg="False">
+            <OSrc neg="False">
             <ObjectRef ref="net-Internal_net"/>
           </OSrc>
-          <ODst neg="False">
+            <ODst neg="False">
             <ObjectRef ref="sysid0"/>
           </ODst>
-          <OSrv neg="False">
+            <OSrv neg="False">
             <ServiceRef ref="tcp-HTTP"/>
             <ServiceRef ref="sg-Useful_ICMP"/>
           </OSrv>
-          <TSrc neg="False">
+            <TSrc neg="False">
             <ObjectRef ref="sysid0"/>
           </TSrc>
-          <TDst neg="False">
+            <TDst neg="False">
             <ObjectRef ref="sysid0"/>
           </TDst>
-          <TSrv neg="False">
+            <TSrv neg="False">
             <ServiceRef ref="sysid1"/>
           </TSrv>
-          <NATRuleOptions>
-            <Option name="id"></Option>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
+            <NATRuleOptions>
+            <Option name="id"/>
           </NATRuleOptions>
-        </NATRule>
+          </NATRule>
         <NATRule id="id2999906X89754" disabled="False" group="" position="2" action="Translate" comment="">
-          <OSrc neg="False">
+            <OSrc neg="False">
             <ObjectRef ref="net-Internal_net"/>
           </OSrc>
-          <ODst neg="False">
+            <ODst neg="False">
             <ObjectRef ref="sysid0"/>
           </ODst>
-          <OSrv neg="False">
+            <OSrv neg="False">
             <ServiceRef ref="tcp-HTTP"/>
             <ServiceRef ref="sg-Useful_ICMP"/>
             <ServiceRef ref="ip-IPSEC"/>
             <ServiceRef ref="id3F3E9EFC"/>
           </OSrv>
-          <TSrc neg="False">
+            <TSrc neg="False">
             <ObjectRef ref="sysid0"/>
           </TSrc>
-          <TDst neg="False">
+            <TDst neg="False">
             <ObjectRef ref="sysid0"/>
           </TDst>
-          <TSrv neg="False">
+            <TSrv neg="False">
             <ServiceRef ref="sysid1"/>
           </TSrv>
-          <NATRuleOptions>
-            <Option name="id"></Option>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
+            <NATRuleOptions>
+            <Option name="id"/>
           </NATRuleOptions>
-        </NATRule>
+          </NATRule>
         <NATRule id="id2999923X89754" disabled="False" group="" position="3" action="Translate" comment="">
-          <OSrc neg="False">
+            <OSrc neg="False">
             <ObjectRef ref="net-Internal_net"/>
           </OSrc>
-          <ODst neg="False">
+            <ODst neg="False">
             <ObjectRef ref="sysid0"/>
           </ODst>
-          <OSrv neg="False">
+            <OSrv neg="False">
             <ServiceRef ref="sysid1"/>
           </OSrv>
-          <TSrc neg="False">
+            <TSrc neg="False">
             <ObjectRef ref="sysid0"/>
           </TSrc>
-          <TDst neg="False">
+            <TDst neg="False">
             <ObjectRef ref="sysid0"/>
           </TDst>
-          <TSrv neg="False">
+            <TSrv neg="False">
             <ServiceRef ref="sysid1"/>
           </TSrv>
-          <NATRuleOptions>
-            <Option name="id"></Option>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
+            <NATRuleOptions>
+            <Option name="id"/>
           </NATRuleOptions>
-        </NATRule>
+          </NATRule>
         <NATRule id="id2999937X89754" disabled="False" group="" position="4" action="Translate" comment="">
-          <OSrc neg="False">
+            <OSrc neg="False">
             <ObjectRef ref="net-Internal_net"/>
           </OSrc>
-          <ODst neg="False">
+            <ODst neg="False">
             <ObjectRef ref="sysid0"/>
           </ODst>
-          <OSrv neg="False">
+            <OSrv neg="False">
             <ServiceRef ref="sysid1"/>
           </OSrv>
-          <TSrc neg="False">
+            <TSrc neg="False">
             <ObjectRef ref="sysid0"/>
           </TSrc>
-          <TDst neg="False">
+            <TDst neg="False">
             <ObjectRef ref="sysid0"/>
           </TDst>
-          <TSrv neg="False">
+            <TSrv neg="False">
             <ServiceRef ref="sysid1"/>
           </TSrv>
-          <NATRuleOptions>
-            <Option name="id"></Option>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
+            <NATRuleOptions>
+            <Option name="id"/>
           </NATRuleOptions>
-        </NATRule>
+          </NATRule>
         <NATRule id="id2999951X89754" disabled="False" group="" position="5" action="Translate" comment="">
-          <OSrc neg="False">
+            <OSrc neg="False">
             <ObjectRef ref="net-Internal_net"/>
           </OSrc>
-          <ODst neg="False">
+            <ODst neg="False">
             <ObjectRef ref="sysid0"/>
           </ODst>
-          <OSrv neg="False">
+            <OSrv neg="False">
             <ServiceRef ref="sysid1"/>
           </OSrv>
-          <TSrc neg="False">
+            <TSrc neg="False">
             <ObjectRef ref="id48356E0A14854"/>
           </TSrc>
-          <TDst neg="False">
+            <TDst neg="False">
             <ObjectRef ref="sysid0"/>
           </TDst>
-          <TSrv neg="False">
+            <TSrv neg="False">
             <ServiceRef ref="sysid1"/>
           </TSrv>
-          <NATRuleOptions>
-            <Option name="id"></Option>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
+            <NATRuleOptions>
+            <Option name="id"/>
           </NATRuleOptions>
-        </NATRule>
+          </NATRule>
         <NATRule id="id2999965X89754" disabled="False" group="" position="6" action="Translate" comment="">
-          <OSrc neg="False">
+            <OSrc neg="False">
             <ObjectRef ref="host-hostA"/>
           </OSrc>
-          <ODst neg="False">
+            <ODst neg="False">
             <ObjectRef ref="sysid0"/>
           </ODst>
-          <OSrv neg="False">
+            <OSrv neg="False">
             <ServiceRef ref="sysid1"/>
           </OSrv>
-          <TSrc neg="False">
+            <TSrc neg="False">
             <ObjectRef ref="id3AFADBF9"/>
           </TSrc>
-          <TDst neg="False">
+            <TDst neg="False">
             <ObjectRef ref="sysid0"/>
           </TDst>
-          <TSrv neg="False">
+            <TSrv neg="False">
             <ServiceRef ref="sysid1"/>
           </TSrv>
-          <NATRuleOptions>
-            <Option name="id"></Option>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
+            <NATRuleOptions>
+            <Option name="id"/>
           </NATRuleOptions>
-        </NATRule>
+          </NATRule>
         <NATRule id="id2999979X89754" disabled="False" group="" position="7" action="Translate" comment="">
-          <OSrc neg="False">
+            <OSrc neg="False">
             <ObjectRef ref="host-hostA"/>
           </OSrc>
-          <ODst neg="False">
+            <ODst neg="False">
             <ObjectRef ref="sysid0"/>
           </ODst>
-          <OSrv neg="False">
+            <OSrv neg="False">
             <ServiceRef ref="sysid1"/>
           </OSrv>
-          <TSrc neg="False">
+            <TSrc neg="False">
             <ObjectRef ref="id3DE47B6C"/>
           </TSrc>
-          <TDst neg="False">
+            <TDst neg="False">
             <ObjectRef ref="sysid0"/>
           </TDst>
-          <TSrv neg="False">
+            <TSrv neg="False">
             <ServiceRef ref="sysid1"/>
           </TSrv>
-          <NATRuleOptions>
-            <Option name="id"></Option>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
+            <NATRuleOptions>
+            <Option name="id"/>
             <Option name="ipt_nat_random">True</Option>
             <Option name="ipt_snat_random">True</Option>
             <Option name="ipt_use_snat_instead_of_masq">False</Option>
           </NATRuleOptions>
-        </NATRule>
+          </NATRule>
         <NATRule id="id2999993X89754" disabled="False" group="" position="8" action="Translate" comment="">
-          <OSrc neg="False">
+            <OSrc neg="False">
             <ObjectRef ref="net-Internal_net"/>
           </OSrc>
-          <ODst neg="False">
+            <ODst neg="False">
             <ObjectRef ref="host-hostA"/>
             <ObjectRef ref="id3D8FC56A"/>
           </ODst>
-          <OSrv neg="False">
+            <OSrv neg="False">
             <ServiceRef ref="sysid1"/>
           </OSrv>
-          <TSrc neg="False">
+            <TSrc neg="False">
             <ObjectRef ref="id3AFC191C"/>
           </TSrc>
-          <TDst neg="False">
+            <TDst neg="False">
             <ObjectRef ref="sysid0"/>
           </TDst>
-          <TSrv neg="False">
+            <TSrv neg="False">
             <ServiceRef ref="sysid1"/>
           </TSrv>
-          <NATRuleOptions/>
-        </NATRule>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
+            <NATRuleOptions/>
+          </NATRule>
         <NATRule id="id3000008X89754" disabled="False" group="" position="9" action="Translate" comment="">
-          <OSrc neg="False">
+            <OSrc neg="False">
             <ObjectRef ref="net-Internal_net"/>
           </OSrc>
-          <ODst neg="False">
+            <ODst neg="False">
             <ObjectRef ref="id3B022266"/>
           </ODst>
-          <OSrv neg="False">
+            <OSrv neg="False">
             <ServiceRef ref="sysid1"/>
           </OSrv>
-          <TSrc neg="False">
+            <TSrc neg="False">
             <ObjectRef ref="sysid0"/>
           </TSrc>
-          <TDst neg="False">
+            <TDst neg="False">
             <ObjectRef ref="sysid0"/>
           </TDst>
-          <TSrv neg="False">
+            <TSrv neg="False">
             <ServiceRef ref="sysid1"/>
           </TSrv>
-          <NATRuleOptions/>
-        </NATRule>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
+            <NATRuleOptions/>
+          </NATRule>
         <NATRule id="id3000022X89754" disabled="False" group="" position="10" action="Translate" comment="">
-          <OSrc neg="False">
+            <OSrc neg="False">
             <ObjectRef ref="net-Internal_net"/>
           </OSrc>
-          <ODst neg="False">
+            <ODst neg="False">
             <ObjectRef ref="id3B022266"/>
           </ODst>
-          <OSrv neg="False">
+            <OSrv neg="False">
             <ServiceRef ref="sysid1"/>
           </OSrv>
-          <TSrc neg="False">
+            <TSrc neg="False">
             <ObjectRef ref="sysid0"/>
           </TSrc>
-          <TDst neg="False">
+            <TDst neg="False">
             <ObjectRef ref="sysid0"/>
           </TDst>
-          <TSrv neg="False">
+            <TSrv neg="False">
             <ServiceRef ref="sysid1"/>
           </TSrv>
-          <NATRuleOptions/>
-        </NATRule>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
+            <NATRuleOptions/>
+          </NATRule>
         <NATRule id="id3000036X89754" disabled="False" group="" position="11" action="Translate" comment="">
-          <OSrc neg="False">
+            <OSrc neg="False">
             <ObjectRef ref="host-hostA"/>
             <ObjectRef ref="host-hostB"/>
             <ObjectRef ref="id3B4572AF"/>
           </OSrc>
-          <ODst neg="False">
+            <ODst neg="False">
             <ObjectRef ref="id3D151943"/>
             <ObjectRef ref="id3D151947"/>
           </ODst>
-          <OSrv neg="False">
+            <OSrv neg="False">
             <ServiceRef ref="sysid1"/>
           </OSrv>
-          <TSrc neg="False">
+            <TSrc neg="False">
             <ObjectRef ref="sysid0"/>
           </TSrc>
-          <TDst neg="False">
+            <TDst neg="False">
             <ObjectRef ref="sysid0"/>
           </TDst>
-          <TSrv neg="False">
+            <TSrv neg="False">
             <ServiceRef ref="sysid1"/>
           </TSrv>
-          <NATRuleOptions/>
-        </NATRule>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
+            <NATRuleOptions/>
+          </NATRule>
         <NATRule id="id3000054X89754" disabled="False" group="" position="12" action="Translate" comment="">
-          <OSrc neg="False">
+            <OSrc neg="False">
             <ObjectRef ref="host-hostA"/>
             <ObjectRef ref="host-hostB"/>
           </OSrc>
-          <ODst neg="True">
+            <ODst neg="True">
             <ObjectRef ref="id3D151943"/>
             <ObjectRef ref="id3D151947"/>
           </ODst>
-          <OSrv neg="False">
+            <OSrv neg="False">
             <ServiceRef ref="sysid1"/>
           </OSrv>
-          <TSrc neg="False">
+            <TSrc neg="False">
             <ObjectRef ref="sysid0"/>
           </TSrc>
-          <TDst neg="False">
+            <TDst neg="False">
             <ObjectRef ref="sysid0"/>
           </TDst>
-          <TSrv neg="False">
+            <TSrv neg="False">
             <ServiceRef ref="sysid1"/>
           </TSrv>
-          <NATRuleOptions/>
-        </NATRule>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
+            <NATRuleOptions/>
+          </NATRule>
         <NATRule id="id3000070X89754" disabled="False" group="" position="13" action="Translate" comment="">
-          <OSrc neg="False">
+            <OSrc neg="False">
             <ObjectRef ref="sysid0"/>
           </OSrc>
-          <ODst neg="False">
+            <ODst neg="False">
             <ObjectRef ref="id3AFADBF9"/>
           </ODst>
-          <OSrv neg="False">
+            <OSrv neg="False">
             <ServiceRef ref="tcp-HTTP"/>
             <ServiceRef ref="tcp-NNTP"/>
             <ServiceRef ref="sg-Useful_ICMP"/>
             <ServiceRef ref="ip-IPSEC"/>
             <ServiceRef ref="id3F3E9EFC"/>
           </OSrv>
-          <TSrc neg="False">
+            <TSrc neg="False">
             <ObjectRef ref="sysid0"/>
           </TSrc>
-          <TDst neg="False">
+            <TDst neg="False">
             <ObjectRef ref="host-hostA"/>
           </TDst>
-          <TSrv neg="False">
+            <TSrv neg="False">
             <ServiceRef ref="sysid1"/>
           </TSrv>
-          <NATRuleOptions/>
-        </NATRule>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
+            <NATRuleOptions/>
+          </NATRule>
         <NATRule id="id3000088X89754" disabled="False" group="" position="14" action="Translate" comment="">
-          <OSrc neg="False">
+            <OSrc neg="False">
             <ObjectRef ref="sysid0"/>
           </OSrc>
-          <ODst neg="False">
+            <ODst neg="False">
             <ObjectRef ref="id3AFADBF9"/>
           </ODst>
-          <OSrv neg="False">
+            <OSrv neg="False">
             <ServiceRef ref="tcp-HTTP"/>
             <ServiceRef ref="tcp-NNTP"/>
             <ServiceRef ref="sg-Useful_ICMP"/>
           </OSrv>
-          <TSrc neg="False">
+            <TSrc neg="False">
             <ObjectRef ref="sysid0"/>
           </TSrc>
-          <TDst neg="False">
+            <TDst neg="False">
             <ObjectRef ref="host-hostA"/>
           </TDst>
-          <TSrv neg="False">
+            <TSrv neg="False">
             <ServiceRef ref="sysid1"/>
           </TSrv>
-          <NATRuleOptions/>
-        </NATRule>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
+            <NATRuleOptions/>
+          </NATRule>
         <NATRule id="id3000104X89754" disabled="False" group="" position="15" action="Translate" comment="">
-          <OSrc neg="False">
+            <OSrc neg="False">
             <ObjectRef ref="sysid0"/>
           </OSrc>
-          <ODst neg="False">
+            <ODst neg="False">
             <ObjectRef ref="id3AFADBF9"/>
           </ODst>
-          <OSrv neg="False">
+            <OSrv neg="False">
             <ServiceRef ref="tcp-HTTP"/>
             <ServiceRef ref="tcp-NNTP"/>
           </OSrv>
-          <TSrc neg="False">
+            <TSrc neg="False">
             <ObjectRef ref="sysid0"/>
           </TSrc>
-          <TDst neg="False">
+            <TDst neg="False">
             <ObjectRef ref="host-hostA"/>
           </TDst>
-          <TSrv neg="False">
+            <TSrv neg="False">
             <ServiceRef ref="sysid1"/>
           </TSrv>
-          <NATRuleOptions/>
-        </NATRule>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
+            <NATRuleOptions/>
+          </NATRule>
         <NATRule id="id3000119X89754" disabled="False" group="" position="16" action="Translate" comment="">
-          <OSrc neg="False">
+            <OSrc neg="False">
             <ObjectRef ref="id3B19C5EB"/>
           </OSrc>
-          <ODst neg="False">
+            <ODst neg="False">
             <ObjectRef ref="id3AFADBF9"/>
           </ODst>
-          <OSrv neg="False">
+            <OSrv neg="False">
             <ServiceRef ref="tcp-HTTP"/>
             <ServiceRef ref="tcp-NNTP"/>
           </OSrv>
-          <TSrc neg="False">
+            <TSrc neg="False">
             <ObjectRef ref="sysid0"/>
           </TSrc>
-          <TDst neg="False">
+            <TDst neg="False">
             <ObjectRef ref="host-hostA"/>
           </TDst>
-          <TSrv neg="False">
+            <TSrv neg="False">
             <ServiceRef ref="sysid1"/>
           </TSrv>
-          <NATRuleOptions/>
-        </NATRule>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
+            <NATRuleOptions/>
+          </NATRule>
         <NATRule id="id3000135X89754" disabled="True" group="" position="17" action="Translate" comment="">
-          <OSrc neg="False">
+            <OSrc neg="False">
             <ObjectRef ref="sysid0"/>
           </OSrc>
-          <ODst neg="False">
+            <ODst neg="False">
             <ObjectRef ref="id3AFADBF9"/>
           </ODst>
-          <OSrv neg="False">
+            <OSrv neg="False">
             <ServiceRef ref="tcp-HTTP"/>
           </OSrv>
-          <TSrc neg="False">
+            <TSrc neg="False">
             <ObjectRef ref="sysid0"/>
           </TSrc>
-          <TDst neg="False">
+            <TDst neg="False">
             <ObjectRef ref="host-hostA"/>
             <ObjectRef ref="host-hostB"/>
           </TDst>
-          <TSrv neg="False">
+            <TSrv neg="False">
             <ServiceRef ref="sysid1"/>
           </TSrv>
-          <NATRuleOptions/>
-        </NATRule>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
+            <NATRuleOptions/>
+          </NATRule>
         <NATRule id="id3000150X89754" disabled="False" group="" position="18" action="Translate" comment="">
-          <OSrc neg="False">
+            <OSrc neg="False">
             <ObjectRef ref="sysid0"/>
           </OSrc>
-          <ODst neg="False">
+            <ODst neg="False">
             <ObjectRef ref="id3DE47B6C"/>
           </ODst>
-          <OSrv neg="False">
+            <OSrv neg="False">
             <ServiceRef ref="tcp-HTTP"/>
             <ServiceRef ref="tcp-NNTP"/>
           </OSrv>
-          <TSrc neg="False">
+            <TSrc neg="False">
             <ObjectRef ref="sysid0"/>
           </TSrc>
-          <TDst neg="False">
+            <TDst neg="False">
             <ObjectRef ref="host-hostA"/>
           </TDst>
-          <TSrv neg="False">
+            <TSrv neg="False">
             <ServiceRef ref="sysid1"/>
           </TSrv>
-          <NATRuleOptions/>
-        </NATRule>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
+            <NATRuleOptions/>
+          </NATRule>
         <NATRule id="id3000165X89754" disabled="False" group="" position="19" action="Translate" comment="">
-          <OSrc neg="False">
+            <OSrc neg="False">
             <ObjectRef ref="sysid0"/>
           </OSrc>
-          <ODst neg="False">
+            <ODst neg="False">
             <ObjectRef ref="id3AFC0F70"/>
           </ODst>
-          <OSrv neg="False">
+            <OSrv neg="False">
             <ServiceRef ref="tcp-NNTP"/>
           </OSrv>
-          <TSrc neg="False">
+            <TSrc neg="False">
             <ObjectRef ref="sysid0"/>
           </TSrc>
-          <TDst neg="False">
+            <TDst neg="False">
             <ObjectRef ref="host-hostA"/>
           </TDst>
-          <TSrv neg="False">
+            <TSrv neg="False">
             <ServiceRef ref="sysid1"/>
           </TSrv>
-          <NATRuleOptions/>
-        </NATRule>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
+            <NATRuleOptions/>
+          </NATRule>
         <NATRule id="id3000179X89754" disabled="False" group="" position="20" action="Translate" comment="">
-          <OSrc neg="False">
+            <OSrc neg="False">
             <ObjectRef ref="host-hostB"/>
           </OSrc>
-          <ODst neg="False">
+            <ODst neg="False">
             <ObjectRef ref="sysid0"/>
           </ODst>
-          <OSrv neg="False">
+            <OSrv neg="False">
             <ServiceRef ref="sysid1"/>
           </OSrv>
-          <TSrc neg="False">
+            <TSrc neg="False">
             <ObjectRef ref="id3BD6736B"/>
           </TSrc>
-          <TDst neg="False">
+            <TDst neg="False">
             <ObjectRef ref="sysid0"/>
           </TDst>
-          <TSrv neg="False">
+            <TSrv neg="False">
             <ServiceRef ref="sysid1"/>
           </TSrv>
-          <NATRuleOptions>
-            <Option name="id"></Option>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
+            <NATRuleOptions>
+            <Option name="id"/>
           </NATRuleOptions>
-        </NATRule>
+          </NATRule>
         <NATRule id="id3000193X89754" disabled="False" group="" position="21" action="Translate" comment="">
-          <OSrc neg="False">
+            <OSrc neg="False">
             <ObjectRef ref="sysid0"/>
           </OSrc>
-          <ODst neg="False">
+            <ODst neg="False">
             <ObjectRef ref="id3BD6736B"/>
           </ODst>
-          <OSrv neg="False">
+            <OSrv neg="False">
             <ServiceRef ref="sysid1"/>
           </OSrv>
-          <TSrc neg="False">
+            <TSrc neg="False">
             <ObjectRef ref="sysid0"/>
           </TSrc>
-          <TDst neg="False">
+            <TDst neg="False">
             <ObjectRef ref="host-hostB"/>
           </TDst>
-          <TSrv neg="False">
+            <TSrv neg="False">
             <ServiceRef ref="sysid1"/>
           </TSrv>
-          <NATRuleOptions/>
-        </NATRule>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
+            <NATRuleOptions/>
+          </NATRule>
         <NATRule id="id3000207X89754" disabled="False" group="" position="22" action="Translate" comment="">
-          <OSrc neg="False">
+            <OSrc neg="False">
             <ObjectRef ref="net-Internal_net"/>
           </OSrc>
-          <ODst neg="False">
+            <ODst neg="False">
             <ObjectRef ref="sysid0"/>
           </ODst>
-          <OSrv neg="False">
+            <OSrv neg="False">
             <ServiceRef ref="sysid1"/>
           </OSrv>
-          <TSrc neg="False">
+            <TSrc neg="False">
             <ObjectRef ref="id4368AD8615884"/>
           </TSrc>
-          <TDst neg="False">
+            <TDst neg="False">
             <ObjectRef ref="sysid0"/>
           </TDst>
-          <TSrv neg="False">
+            <TSrv neg="False">
             <ServiceRef ref="sysid1"/>
           </TSrv>
-          <NATRuleOptions/>
-        </NATRule>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
+            <NATRuleOptions/>
+          </NATRule>
         <NATRule id="id3000221X89754" disabled="False" group="" position="23" action="Translate" comment="NETMAP ">
-          <OSrc neg="False">
+            <OSrc neg="False">
             <ObjectRef ref="net-Internal_net"/>
           </OSrc>
-          <ODst neg="False">
+            <ODst neg="False">
             <ObjectRef ref="sysid0"/>
           </ODst>
-          <OSrv neg="False">
+            <OSrv neg="False">
             <ServiceRef ref="sysid1"/>
           </OSrv>
-          <TSrc neg="False">
+            <TSrc neg="False">
             <ObjectRef ref="id3B665641"/>
           </TSrc>
-          <TDst neg="False">
+            <TDst neg="False">
             <ObjectRef ref="sysid0"/>
           </TDst>
-          <TSrv neg="False">
+            <TSrv neg="False">
             <ServiceRef ref="sysid1"/>
           </TSrv>
-          <NATRuleOptions/>
-        </NATRule>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
+            <NATRuleOptions/>
+          </NATRule>
         <NATRule id="id3000235X89754" disabled="False" group="" position="24" action="Translate" comment="NETMAP">
-          <OSrc neg="False">
+            <OSrc neg="False">
             <ObjectRef ref="sysid0"/>
           </OSrc>
-          <ODst neg="False">
+            <ODst neg="False">
             <ObjectRef ref="id3B665641"/>
           </ODst>
-          <OSrv neg="False">
+            <OSrv neg="False">
             <ServiceRef ref="sysid1"/>
           </OSrv>
-          <TSrc neg="False">
+            <TSrc neg="False">
             <ObjectRef ref="sysid0"/>
           </TSrc>
-          <TDst neg="False">
+            <TDst neg="False">
             <ObjectRef ref="net-Internal_net"/>
           </TDst>
-          <TSrv neg="False">
+            <TSrv neg="False">
             <ServiceRef ref="sysid1"/>
           </TSrv>
-          <NATRuleOptions/>
-        </NATRule>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
+            <NATRuleOptions/>
+          </NATRule>
         <NATRule id="id3000249X89754" disabled="False" group="" position="25" action="Translate" comment="">
-          <OSrc neg="False">
+            <OSrc neg="False">
             <ObjectRef ref="sysid0"/>
           </OSrc>
-          <ODst neg="False">
+            <ODst neg="False">
             <ObjectRef ref="sysid0"/>
           </ODst>
-          <OSrv neg="False">
+            <OSrv neg="False">
             <ServiceRef ref="id3B20468D"/>
           </OSrv>
-          <TSrc neg="False">
+            <TSrc neg="False">
             <ObjectRef ref="sysid0"/>
           </TSrc>
-          <TDst neg="False">
+            <TDst neg="False">
             <ObjectRef ref="host-hostA"/>
           </TDst>
-          <TSrv neg="False">
+            <TSrv neg="False">
             <ServiceRef ref="id3B20468D"/>
           </TSrv>
-          <NATRuleOptions/>
-        </NATRule>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
+            <NATRuleOptions/>
+          </NATRule>
         <NATRule id="id3000263X89754" disabled="False" group="" position="26" action="Translate" comment="">
-          <OSrc neg="False">
+            <OSrc neg="False">
             <ObjectRef ref="sysid0"/>
           </OSrc>
-          <ODst neg="False">
+            <ODst neg="False">
             <ObjectRef ref="sysid0"/>
           </ODst>
-          <OSrv neg="False">
+            <OSrv neg="False">
             <ServiceRef ref="tcp-HTTP"/>
           </OSrv>
-          <TSrc neg="False">
+            <TSrc neg="False">
             <ObjectRef ref="sysid0"/>
           </TSrc>
-          <TDst neg="False">
+            <TDst neg="False">
             <ObjectRef ref="host-hostA"/>
           </TDst>
-          <TSrv neg="False">
+            <TSrv neg="False">
             <ServiceRef ref="sysid1"/>
           </TSrv>
-          <NATRuleOptions/>
-        </NATRule>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
+            <NATRuleOptions/>
+          </NATRule>
         <NATRule id="id3000278X89754" disabled="False" group="" position="27" action="Translate" comment="">
-          <OSrc neg="False">
+            <OSrc neg="False">
             <ObjectRef ref="sysid0"/>
           </OSrc>
-          <ODst neg="False">
+            <ODst neg="False">
             <ObjectRef ref="id3AFADBF9"/>
           </ODst>
-          <OSrv neg="False">
+            <OSrv neg="False">
             <ServiceRef ref="tcp-HTTP"/>
           </OSrv>
-          <TSrc neg="False">
+            <TSrc neg="False">
             <ObjectRef ref="sysid0"/>
           </TSrc>
-          <TDst neg="False">
+            <TDst neg="False">
             <ObjectRef ref="host-hostA"/>
           </TDst>
-          <TSrv neg="False">
+            <TSrv neg="False">
             <ServiceRef ref="tcp-SMTP"/>
           </TSrv>
-          <NATRuleOptions/>
-        </NATRule>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
+            <NATRuleOptions/>
+          </NATRule>
         <NATRule id="id3000292X89754" disabled="False" group="" position="28" action="Translate" comment="">
-          <OSrc neg="False">
+            <OSrc neg="False">
             <ObjectRef ref="sysid0"/>
           </OSrc>
-          <ODst neg="False">
+            <ODst neg="False">
             <ObjectRef ref="sysid0"/>
           </ODst>
-          <OSrv neg="False">
+            <OSrv neg="False">
             <ServiceRef ref="tcp-HTTP"/>
             <ServiceRef ref="id3B4FED69"/>
           </OSrv>
-          <TSrc neg="False">
+            <TSrc neg="False">
             <ObjectRef ref="sysid0"/>
           </TSrc>
-          <TDst neg="False">
+            <TDst neg="False">
             <ObjectRef ref="sysid0"/>
           </TDst>
-          <TSrv neg="False">
+            <TSrv neg="False">
             <ServiceRef ref="id3B4FF09A"/>
           </TSrv>
-          <NATRuleOptions/>
-        </NATRule>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
+            <NATRuleOptions/>
+          </NATRule>
         <NATRule id="id3000307X89754" disabled="False" group="" position="29" action="Translate" comment="">
-          <OSrc neg="False">
+            <OSrc neg="False">
             <ObjectRef ref="sysid0"/>
           </OSrc>
-          <ODst neg="False">
+            <ODst neg="False">
             <ObjectRef ref="sysid0"/>
           </ODst>
-          <OSrv neg="False">
+            <OSrv neg="False">
             <ServiceRef ref="id3DDDE4E4"/>
           </OSrv>
-          <TSrc neg="False">
+            <TSrc neg="False">
             <ObjectRef ref="sysid0"/>
           </TSrc>
-          <TDst neg="False">
+            <TDst neg="False">
             <ObjectRef ref="id3CEBFF26"/>
           </TDst>
-          <TSrv neg="False">
+            <TSrv neg="False">
             <ServiceRef ref="sysid1"/>
           </TSrv>
-          <NATRuleOptions/>
-        </NATRule>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
+            <NATRuleOptions/>
+          </NATRule>
         <NATRule id="id3000321X89754" disabled="False" group="" position="30" action="Translate" comment="">
-          <OSrc neg="False">
+            <OSrc neg="False">
             <ObjectRef ref="sysid0"/>
           </OSrc>
-          <ODst neg="False">
+            <ODst neg="False">
             <ObjectRef ref="sysid0"/>
           </ODst>
-          <OSrv neg="False">
+            <OSrv neg="False">
             <ServiceRef ref="id3DDDE4E4"/>
           </OSrv>
-          <TSrc neg="False">
+            <TSrc neg="False">
             <ObjectRef ref="sysid0"/>
           </TSrc>
-          <TDst neg="False">
+            <TDst neg="False">
             <ObjectRef ref="id3CD87A5E"/>
             <ObjectRef ref="id3CD87A6D"/>
             <ObjectRef ref="id3CD87A8B"/>
             <ObjectRef ref="id3CD87A7C"/>
             <ObjectRef ref="id3CD87A53"/>
           </TDst>
-          <TSrv neg="False">
+            <TSrv neg="False">
             <ServiceRef ref="sysid1"/>
           </TSrv>
-          <NATRuleOptions/>
-        </NATRule>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
+            <NATRuleOptions/>
+          </NATRule>
         <NATRule id="id3000339X89754" disabled="False" group="" position="31" action="Translate" comment="transparent proxy rule">
-          <OSrc neg="False">
+            <OSrc neg="False">
             <ObjectRef ref="net-Internal_net"/>
           </OSrc>
-          <ODst neg="True">
+            <ODst neg="True">
             <ObjectRef ref="id3AFADBF9"/>
           </ODst>
-          <OSrv neg="False">
+            <OSrv neg="False">
             <ServiceRef ref="sysid1"/>
           </OSrv>
-          <TSrc neg="False">
+            <TSrc neg="False">
             <ObjectRef ref="sysid0"/>
           </TSrc>
-          <TDst neg="False">
+            <TDst neg="False">
             <ObjectRef ref="id3D151943"/>
           </TDst>
-          <TSrv neg="False">
+            <TSrv neg="False">
             <ServiceRef ref="sysid1"/>
           </TSrv>
-          <NATRuleOptions/>
-        </NATRule>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
+            <NATRuleOptions/>
+          </NATRule>
         <NATRule id="id3000353X89754" disabled="True" group="" position="32" action="Translate" comment="">
-          <OSrc neg="False">
+            <OSrc neg="False">
             <ObjectRef ref="sysid0"/>
           </OSrc>
-          <ODst neg="False">
+            <ODst neg="False">
             <ObjectRef ref="sysid0"/>
           </ODst>
-          <OSrv neg="False">
+            <OSrv neg="False">
             <ServiceRef ref="id3DDDE4E4"/>
           </OSrv>
-          <TSrc neg="False">
+            <TSrc neg="False">
             <ObjectRef ref="sysid0"/>
           </TSrc>
-          <TDst neg="False">
+            <TDst neg="False">
             <ObjectRef ref="host-hostA"/>
             <ObjectRef ref="host-hostB"/>
           </TDst>
-          <TSrv neg="False">
+            <TSrv neg="False">
             <ServiceRef ref="sysid1"/>
           </TSrv>
-          <NATRuleOptions/>
-        </NATRule>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
+            <NATRuleOptions/>
+          </NATRule>
         <NATRule id="id3000368X89754" disabled="False" group="" position="33" action="Translate" comment="">
-          <OSrc neg="False">
+            <OSrc neg="False">
             <ObjectRef ref="sysid0"/>
           </OSrc>
-          <ODst neg="False">
+            <ODst neg="False">
             <ObjectRef ref="sysid0"/>
           </ODst>
-          <OSrv neg="False">
+            <OSrv neg="False">
             <ServiceRef ref="tcp-HTTP"/>
           </OSrv>
-          <TSrc neg="False">
+            <TSrc neg="False">
             <ObjectRef ref="sysid0"/>
           </TSrc>
-          <TDst neg="False">
+            <TDst neg="False">
             <ObjectRef ref="sysid0"/>
           </TDst>
-          <TSrv neg="False">
+            <TSrv neg="False">
             <ServiceRef ref="id3DDDE4E4"/>
           </TSrv>
-          <NATRuleOptions/>
-        </NATRule>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
+            <NATRuleOptions/>
+          </NATRule>
         <NATRule id="id3000382X89754" disabled="False" group="" position="34" action="Translate" comment="">
-          <OSrc neg="False">
+            <OSrc neg="False">
             <ObjectRef ref="sysid0"/>
           </OSrc>
-          <ODst neg="False">
+            <ODst neg="False">
             <ObjectRef ref="host-hostA"/>
           </ODst>
-          <OSrv neg="False">
+            <OSrv neg="False">
             <ServiceRef ref="tcp-HTTP"/>
           </OSrv>
-          <TSrc neg="False">
+            <TSrc neg="False">
             <ObjectRef ref="sysid0"/>
           </TSrc>
-          <TDst neg="False">
+            <TDst neg="False">
             <ObjectRef ref="host-hostA"/>
           </TDst>
-          <TSrv neg="False">
+            <TSrv neg="False">
             <ServiceRef ref="id3DDDE4E4"/>
           </TSrv>
-          <NATRuleOptions/>
-        </NATRule>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
+            <NATRuleOptions/>
+          </NATRule>
         <NATRule id="id3000396X89754" disabled="False" group="" position="35" action="Translate" comment="">
-          <OSrc neg="False">
+            <OSrc neg="False">
             <ObjectRef ref="host-hostA"/>
           </OSrc>
-          <ODst neg="False">
+            <ODst neg="False">
             <ObjectRef ref="sysid0"/>
           </ODst>
-          <OSrv neg="False">
+            <OSrv neg="False">
             <ServiceRef ref="tcp-HTTP"/>
           </OSrv>
-          <TSrc neg="False">
+            <TSrc neg="False">
             <ObjectRef ref="sysid0"/>
           </TSrc>
-          <TDst neg="False">
+            <TDst neg="False">
             <ObjectRef ref="sysid0"/>
           </TDst>
-          <TSrv neg="False">
+            <TSrv neg="False">
             <ServiceRef ref="sysid1"/>
           </TSrv>
-          <NATRuleOptions/>
-        </NATRule>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
+            <NATRuleOptions/>
+          </NATRule>
         <NATRule id="id3000410X89754" disabled="False" group="" position="36" action="Translate" comment="">
-          <OSrc neg="True">
+            <OSrc neg="True">
             <ObjectRef ref="host-hostA"/>
           </OSrc>
-          <ODst neg="False">
+            <ODst neg="False">
             <ObjectRef ref="sysid0"/>
           </ODst>
-          <OSrv neg="False">
+            <OSrv neg="False">
             <ServiceRef ref="tcp-HTTP"/>
           </OSrv>
-          <TSrc neg="False">
+            <TSrc neg="False">
             <ObjectRef ref="sysid0"/>
           </TSrc>
-          <TDst neg="False">
+            <TDst neg="False">
             <ObjectRef ref="host-hostA"/>
           </TDst>
-          <TSrv neg="False">
+            <TSrv neg="False">
             <ServiceRef ref="id3B4FF09A"/>
           </TSrv>
-          <NATRuleOptions/>
-        </NATRule>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
+            <NATRuleOptions/>
+          </NATRule>
         <NATRule id="id3000424X89754" disabled="False" group="" position="37" action="Translate" comment="">
-          <OSrc neg="True">
+            <OSrc neg="True">
             <ObjectRef ref="id3B4572AF"/>
           </OSrc>
-          <ODst neg="True">
+            <ODst neg="True">
             <ObjectRef ref="id40F195D2"/>
           </ODst>
-          <OSrv neg="False">
+            <OSrv neg="False">
             <ServiceRef ref="tcp-HTTP"/>
           </OSrv>
-          <TSrc neg="False">
+            <TSrc neg="False">
             <ObjectRef ref="sysid0"/>
           </TSrc>
-          <TDst neg="False">
+            <TDst neg="False">
             <ObjectRef ref="id40F195D2"/>
           </TDst>
-          <TSrv neg="False">
+            <TSrv neg="False">
             <ServiceRef ref="id3B4FF09A"/>
           </TSrv>
-          <NATRuleOptions/>
-        </NATRule>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
+            <NATRuleOptions/>
+          </NATRule>
         <NATRule id="id3000438X89754" disabled="False" group="" position="38" action="Translate" comment="">
-          <OSrc neg="True">
+            <OSrc neg="True">
             <ObjectRef ref="id3B4572AF"/>
           </OSrc>
-          <ODst neg="False">
+            <ODst neg="False">
             <ObjectRef ref="sysid0"/>
           </ODst>
-          <OSrv neg="True">
+            <OSrv neg="True">
             <ServiceRef ref="tcp-HTTP"/>
           </OSrv>
-          <TSrc neg="False">
+            <TSrc neg="False">
             <ObjectRef ref="sysid0"/>
           </TSrc>
-          <TDst neg="False">
+            <TDst neg="False">
             <ObjectRef ref="sysid0"/>
           </TDst>
-          <TSrv neg="False">
+            <TSrv neg="False">
             <ServiceRef ref="sysid1"/>
           </TSrv>
-          <NATRuleOptions/>
-        </NATRule>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
+            <NATRuleOptions/>
+          </NATRule>
         <NATRule id="id3000452X89754" disabled="False" group="" position="39" action="Translate" comment="">
-          <OSrc neg="False">
+            <OSrc neg="False">
             <ObjectRef ref="net-Internal_net"/>
           </OSrc>
-          <ODst neg="False">
+            <ODst neg="False">
             <ObjectRef ref="sysid0"/>
           </ODst>
-          <OSrv neg="False">
+            <OSrv neg="False">
             <ServiceRef ref="tcp-HTTP"/>
           </OSrv>
-          <TSrc neg="False">
+            <TSrc neg="False">
             <ObjectRef ref="sysid0"/>
           </TSrc>
-          <TDst neg="False">
+            <TDst neg="False">
             <ObjectRef ref="host-hostA"/>
           </TDst>
-          <TSrv neg="False">
+            <TSrv neg="False">
             <ServiceRef ref="id3B4FF09A"/>
           </TSrv>
-          <NATRuleOptions/>
-        </NATRule>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
+            <NATRuleOptions/>
+          </NATRule>
         <NATRule id="id3000466X89754" disabled="False" group="" position="40" action="Translate" comment="this is the &quot;exception&quot; rule&#10;used in support req. originally">
-          <OSrc neg="False">
+            <OSrc neg="False">
             <ObjectRef ref="id3B4572AF"/>
           </OSrc>
-          <ODst neg="False">
+            <ODst neg="False">
             <ObjectRef ref="sysid0"/>
           </ODst>
-          <OSrv neg="False">
+            <OSrv neg="False">
             <ServiceRef ref="tcp-HTTP"/>
           </OSrv>
-          <TSrc neg="False">
+            <TSrc neg="False">
             <ObjectRef ref="sysid0"/>
           </TSrc>
-          <TDst neg="False">
+            <TDst neg="False">
             <ObjectRef ref="sysid0"/>
           </TDst>
-          <TSrv neg="False">
+            <TSrv neg="False">
             <ServiceRef ref="sysid1"/>
           </TSrv>
-          <NATRuleOptions>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
+            <NATRuleOptions>
             <Option name="color">#C08B5A</Option>
           </NATRuleOptions>
-        </NATRule>
+          </NATRule>
         <NATRule id="id3000480X89754" disabled="False" group="" position="41" action="Translate" comment="">
-          <OSrc neg="False">
+            <OSrc neg="False">
             <ObjectRef ref="net-Internal_net"/>
           </OSrc>
-          <ODst neg="False">
+            <ODst neg="False">
             <ObjectRef ref="sysid0"/>
           </ODst>
-          <OSrv neg="False">
+            <OSrv neg="False">
             <ServiceRef ref="tcp-HTTP"/>
           </OSrv>
-          <TSrc neg="False">
+            <TSrc neg="False">
             <ObjectRef ref="sysid0"/>
           </TSrc>
-          <TDst neg="False">
+            <TDst neg="False">
             <ObjectRef ref="sysid0"/>
           </TDst>
-          <TSrv neg="False">
+            <TSrv neg="False">
             <ServiceRef ref="id3B4FF09A"/>
           </TSrv>
-          <NATRuleOptions>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
+            <NATRuleOptions>
             <Option name="color">#C08B5A</Option>
           </NATRuleOptions>
-        </NATRule>
+          </NATRule>
         <NATRule id="id3000494X89754" disabled="False" group="" position="42" action="Translate" comment="&quot;exception&quot; rule in the pair&#10;from a support req.">
-          <OSrc neg="False">
+            <OSrc neg="False">
             <ObjectRef ref="id3B4572AF"/>
           </OSrc>
-          <ODst neg="False">
+            <ODst neg="False">
             <ObjectRef ref="sysid0"/>
           </ODst>
-          <OSrv neg="False">
+            <OSrv neg="False">
             <ServiceRef ref="tcp-HTTP"/>
           </OSrv>
-          <TSrc neg="False">
+            <TSrc neg="False">
             <ObjectRef ref="sysid0"/>
           </TSrc>
-          <TDst neg="False">
+            <TDst neg="False">
             <ObjectRef ref="sysid0"/>
           </TDst>
-          <TSrv neg="False">
+            <TSrv neg="False">
             <ServiceRef ref="sysid1"/>
           </TSrv>
-          <NATRuleOptions>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
+            <NATRuleOptions>
             <Option name="color">#8BC065</Option>
           </NATRuleOptions>
-        </NATRule>
+          </NATRule>
         <NATRule id="id3000508X89754" disabled="False" group="" position="43" action="Translate" comment="testing transparent proxy&#10;roules for a support req.">
-          <OSrc neg="True">
+            <OSrc neg="True">
             <ObjectRef ref="id3B4572AF"/>
           </OSrc>
-          <ODst neg="False">
+            <ODst neg="False">
             <ObjectRef ref="sysid0"/>
           </ODst>
-          <OSrv neg="False">
+            <OSrv neg="False">
             <ServiceRef ref="tcp-HTTP"/>
           </OSrv>
-          <TSrc neg="False">
+            <TSrc neg="False">
             <ObjectRef ref="sysid0"/>
           </TSrc>
-          <TDst neg="False">
+            <TDst neg="False">
             <ObjectRef ref="sysid0"/>
           </TDst>
-          <TSrv neg="False">
+            <TSrv neg="False">
             <ServiceRef ref="id3B4FF09A"/>
           </TSrv>
-          <NATRuleOptions>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
+            <NATRuleOptions>
             <Option name="color">#8BC065</Option>
           </NATRuleOptions>
-        </NATRule>
+          </NATRule>
         <NATRule id="id3000522X89754" disabled="False" group="" position="44" action="Translate" comment="testing transparent proxy&#10;roules for a support req.">
-          <OSrc neg="True">
+            <OSrc neg="True">
             <ObjectRef ref="id3B4572AF"/>
           </OSrc>
-          <ODst neg="False">
+            <ODst neg="False">
             <ObjectRef ref="sysid0"/>
           </ODst>
-          <OSrv neg="False">
+            <OSrv neg="False">
             <ServiceRef ref="tcp-HTTP"/>
           </OSrv>
-          <TSrc neg="False">
+            <TSrc neg="False">
             <ObjectRef ref="sysid0"/>
           </TSrc>
-          <TDst neg="False">
+            <TDst neg="False">
             <ObjectRef ref="sysid0"/>
           </TDst>
-          <TSrv neg="False">
+            <TSrv neg="False">
             <ServiceRef ref="id3B4FF09A"/>
           </TSrv>
-          <NATRuleOptions>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
+            <NATRuleOptions>
             <Option name="color">#8BC065</Option>
           </NATRuleOptions>
-        </NATRule>
+          </NATRule>
         <NATRule id="id3000536X89754" disabled="False" group="" position="45" action="Translate" comment="testing transparent proxy&#10;roules for a support req.">
-          <OSrc neg="True">
+            <OSrc neg="True">
             <ObjectRef ref="id3B4572AF"/>
           </OSrc>
-          <ODst neg="False">
+            <ODst neg="False">
             <ObjectRef ref="sysid0"/>
           </ODst>
-          <OSrv neg="False">
+            <OSrv neg="False">
             <ServiceRef ref="tcp-HTTP"/>
           </OSrv>
-          <TSrc neg="False">
+            <TSrc neg="False">
             <ObjectRef ref="sysid0"/>
           </TSrc>
-          <TDst neg="False">
+            <TDst neg="False">
             <ObjectRef ref="sysid0"/>
           </TDst>
-          <TSrv neg="False">
+            <TSrv neg="False">
             <ServiceRef ref="id3B4FF09A"/>
           </TSrv>
-          <NATRuleOptions>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
+            <NATRuleOptions>
             <Option name="color">#8BC065</Option>
           </NATRuleOptions>
-        </NATRule>
+          </NATRule>
         <NATRule id="id3000550X89754" disabled="False" group="" position="46" action="Translate" comment="&quot;exception&quot; rule in the pair&#10;from a support req.">
-          <OSrc neg="False">
+            <OSrc neg="False">
             <ObjectRef ref="id3B4572AF"/>
           </OSrc>
-          <ODst neg="False">
+            <ODst neg="False">
             <ObjectRef ref="sysid0"/>
           </ODst>
-          <OSrv neg="False">
+            <OSrv neg="False">
             <ServiceRef ref="tcp-HTTP"/>
           </OSrv>
-          <TSrc neg="False">
+            <TSrc neg="False">
             <ObjectRef ref="sysid0"/>
           </TSrc>
-          <TDst neg="False">
+            <TDst neg="False">
             <ObjectRef ref="sysid0"/>
           </TDst>
-          <TSrv neg="False">
+            <TSrv neg="False">
             <ServiceRef ref="sysid1"/>
           </TSrv>
-          <NATRuleOptions>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
+            <NATRuleOptions>
             <Option name="color">#C0BA44</Option>
           </NATRuleOptions>
-        </NATRule>
+          </NATRule>
         <NATRule id="id3000564X89754" disabled="False" group="" position="47" action="Translate" comment="testing transparent proxy&#10;roules for a support req.">
-          <OSrc neg="True">
+            <OSrc neg="True">
             <ObjectRef ref="id3B4572AF"/>
           </OSrc>
-          <ODst neg="False">
+            <ODst neg="False">
             <ObjectRef ref="sysid0"/>
           </ODst>
-          <OSrv neg="False">
+            <OSrv neg="False">
             <ServiceRef ref="tcp-HTTP"/>
           </OSrv>
-          <TSrc neg="False">
+            <TSrc neg="False">
             <ObjectRef ref="sysid0"/>
           </TSrc>
-          <TDst neg="False">
+            <TDst neg="False">
             <ObjectRef ref="id40F195D2"/>
           </TDst>
-          <TSrv neg="False">
+            <TSrv neg="False">
             <ServiceRef ref="id3B4FF09A"/>
           </TSrv>
-          <NATRuleOptions>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
+            <NATRuleOptions>
             <Option name="color">#C0BA44</Option>
           </NATRuleOptions>
-        </NATRule>
+          </NATRule>
         <NATRule id="id3000578X89754" disabled="False" group="" position="48" action="Translate" comment="">
-          <OSrc neg="False">
+            <OSrc neg="False">
             <ObjectRef ref="net-Internal_net"/>
           </OSrc>
-          <ODst neg="False">
+            <ODst neg="False">
             <ObjectRef ref="sysid0"/>
           </ODst>
-          <OSrv neg="False">
+            <OSrv neg="False">
             <ServiceRef ref="id69385X25753"/>
           </OSrv>
-          <TSrc neg="False">
+            <TSrc neg="False">
             <ObjectRef ref="host-hostA"/>
           </TSrc>
-          <TDst neg="False">
+            <TDst neg="False">
             <ObjectRef ref="sysid0"/>
           </TDst>
-          <TSrv neg="False">
+            <TSrv neg="False">
             <ServiceRef ref="id69386X25753"/>
           </TSrv>
-          <NATRuleOptions/>
-        </NATRule>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
+            <NATRuleOptions/>
+          </NATRule>
         <RuleSetOptions/>
       </NAT>
       <Policy id="id2999502X89754" name="Policy" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="True">
@@ -3317,53 +3494,53 @@
         <Option name="accept_established">True</Option>
         <Option name="accept_new_tcp_with_no_syn">False</Option>
         <Option name="action_on_reject">ICMP net unreachable</Option>
-        <Option name="activationCmd"></Option>
-        <Option name="admUser"></Option>
-        <Option name="altAddress"></Option>
+        <Option name="activationCmd"/>
+        <Option name="admUser"/>
+        <Option name="altAddress"/>
         <Option name="bridging_fw">False</Option>
         <Option name="check_shading">True</Option>
         <Option name="clamp_mss_to_mtu">True</Option>
         <Option name="classify_mark_terminating">False</Option>
         <Option name="cmdline">-xt</Option>
-        <Option name="compiler"></Option>
+        <Option name="compiler"/>
         <Option name="configure_interfaces">True</Option>
         <Option name="debug">False</Option>
         <Option name="drop_invalid">True</Option>
         <Option name="dyn_addr">False</Option>
-        <Option name="epilog_script"></Option>
-        <Option name="firewall_dir"></Option>
+        <Option name="epilog_script"/>
+        <Option name="firewall_dir"/>
         <Option name="firewall_is_part_of_any">True</Option>
         <Option name="firewall_is_part_of_any_and_networks">True</Option>
-        <Option name="id"></Option>
+        <Option name="id"/>
         <Option name="ignore_empty_groups">False</Option>
-        <Option name="inst_cmdline"></Option>
-        <Option name="inst_script"></Option>
-        <Option name="install_script"></Option>
+        <Option name="inst_cmdline"/>
+        <Option name="inst_script"/>
+        <Option name="install_script"/>
         <Option name="ipv4_6_order">ipv4_first</Option>
         <Option name="limit_suffix">/second</Option>
         <Option name="limit_value">5</Option>
         <Option name="linux24_accept_redirects">0</Option>
         <Option name="linux24_accept_source_route">0</Option>
         <Option name="linux24_icmp_echo_ignore_all">1</Option>
-        <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
+        <Option name="linux24_icmp_echo_ignore_broadcasts"/>
         <Option name="linux24_icmp_ignore_bogus_error_responses">1</Option>
-        <Option name="linux24_ip_dynaddr"></Option>
+        <Option name="linux24_ip_dynaddr"/>
         <Option name="linux24_ip_forward">1</Option>
         <Option name="linux24_log_martians">1</Option>
-        <Option name="linux24_path_ip"></Option>
-        <Option name="linux24_path_iptables"></Option>
-        <Option name="linux24_path_logger"></Option>
-        <Option name="linux24_path_lsmod"></Option>
-        <Option name="linux24_path_modprobe"></Option>
+        <Option name="linux24_path_ip"/>
+        <Option name="linux24_path_iptables"/>
+        <Option name="linux24_path_logger"/>
+        <Option name="linux24_path_lsmod"/>
+        <Option name="linux24_path_modprobe"/>
         <Option name="linux24_rp_filter">1</Option>
-        <Option name="linux24_tcp_ecn"></Option>
-        <Option name="linux24_tcp_fack"></Option>
+        <Option name="linux24_tcp_ecn"/>
+        <Option name="linux24_tcp_fack"/>
         <Option name="linux24_tcp_fin_timeout">30</Option>
         <Option name="linux24_tcp_keepalive_interval">1800</Option>
-        <Option name="linux24_tcp_sack"></Option>
-        <Option name="linux24_tcp_syncookies"></Option>
-        <Option name="linux24_tcp_timestamps"></Option>
-        <Option name="linux24_tcp_window_scaling"></Option>
+        <Option name="linux24_tcp_sack"/>
+        <Option name="linux24_tcp_syncookies"/>
+        <Option name="linux24_tcp_timestamps"/>
+        <Option name="linux24_tcp_window_scaling"/>
         <Option name="load_modules">False</Option>
         <Option name="local_nat">True</Option>
         <Option name="log_all">False</Option>
@@ -3377,22 +3554,22 @@
         <Option name="log_tcp_opt">False</Option>
         <Option name="log_tcp_seq">False</Option>
         <Option name="manage_virtual_addr">True</Option>
-        <Option name="mgmt_addr"></Option>
+        <Option name="mgmt_addr"/>
         <Option name="mgmt_ssh">False</Option>
         <Option name="no_iochains_for_any">False</Option>
         <Option name="no_ipv6_default_policy">False</Option>
         <Option name="no_optimisation">False</Option>
-        <Option name="output_file"></Option>
+        <Option name="output_file"/>
         <Option name="platform">iptables</Option>
         <Option name="prolog_place">after_flush</Option>
-        <Option name="prolog_script"></Option>
+        <Option name="prolog_script"/>
         <Option name="proxy_arp">True</Option>
-        <Option name="scpArgs"></Option>
-        <Option name="script_env_path"></Option>
-        <Option name="snmp_contact"></Option>
-        <Option name="snmp_description"></Option>
-        <Option name="snmp_location"></Option>
-        <Option name="sshArgs"></Option>
+        <Option name="scpArgs"/>
+        <Option name="script_env_path"/>
+        <Option name="snmp_contact"/>
+        <Option name="snmp_description"/>
+        <Option name="snmp_location"/>
+        <Option name="sshArgs"/>
         <Option name="ulog_cprange">0</Option>
         <Option name="ulog_nlgroup">1</Option>
         <Option name="ulog_qthreshold">1</Option>
@@ -3422,27 +3599,27 @@
           <IntervalRef ref="sysid2"/>
         </When>
         <PolicyRuleOptions>
-          <Option name="action_on_reject"></Option>
-          <Option name="classify_str"></Option>
-          <Option name="custom_str"></Option>
-          <Option name="ipf_route_opt_addr"></Option>
-          <Option name="ipf_route_opt_if"></Option>
+          <Option name="action_on_reject"/>
+          <Option name="classify_str"/>
+          <Option name="custom_str"/>
+          <Option name="ipf_route_opt_addr"/>
+          <Option name="ipf_route_opt_if"/>
           <Option name="ipf_route_option">route_through</Option>
           <Option name="ipfw_classify_method">2</Option>
           <Option name="ipfw_pipe_port_num">0</Option>
           <Option name="ipfw_pipe_queue_num">0</Option>
           <Option name="ipt_continue">False</Option>
-          <Option name="ipt_gw"></Option>
-          <Option name="ipt_iif"></Option>
+          <Option name="ipt_gw"/>
+          <Option name="ipt_iif"/>
           <Option name="ipt_mark_connections">False</Option>
-          <Option name="ipt_oif"></Option>
+          <Option name="ipt_oif"/>
           <Option name="ipt_tee">False</Option>
           <Option name="pf_fastroute">False</Option>
           <Option name="pf_route_load_option">none</Option>
-          <Option name="pf_route_opt_addr"></Option>
-          <Option name="pf_route_opt_if"></Option>
+          <Option name="pf_route_opt_addr"/>
+          <Option name="pf_route_opt_if"/>
           <Option name="pf_route_option">none</Option>
-          <Option name="rule_name_accounting"></Option>
+          <Option name="rule_name_accounting"/>
           <Option name="stateless">False</Option>
           <Option name="tagobject_id">id449328D924380</Option>
         </PolicyRuleOptions>
@@ -3467,27 +3644,27 @@
           <IntervalRef ref="sysid2"/>
         </When>
         <PolicyRuleOptions>
-          <Option name="action_on_reject"></Option>
-          <Option name="classify_str"></Option>
-          <Option name="custom_str"></Option>
-          <Option name="ipf_route_opt_addr"></Option>
-          <Option name="ipf_route_opt_if"></Option>
+          <Option name="action_on_reject"/>
+          <Option name="classify_str"/>
+          <Option name="custom_str"/>
+          <Option name="ipf_route_opt_addr"/>
+          <Option name="ipf_route_opt_if"/>
           <Option name="ipf_route_option">route_through</Option>
           <Option name="ipfw_classify_method">2</Option>
           <Option name="ipfw_pipe_port_num">0</Option>
           <Option name="ipfw_pipe_queue_num">0</Option>
           <Option name="ipt_continue">False</Option>
-          <Option name="ipt_gw"></Option>
-          <Option name="ipt_iif"></Option>
+          <Option name="ipt_gw"/>
+          <Option name="ipt_iif"/>
           <Option name="ipt_mark_connections">False</Option>
-          <Option name="ipt_oif"></Option>
+          <Option name="ipt_oif"/>
           <Option name="ipt_tee">False</Option>
           <Option name="pf_fastroute">False</Option>
           <Option name="pf_route_load_option">none</Option>
-          <Option name="pf_route_opt_addr"></Option>
-          <Option name="pf_route_opt_if"></Option>
+          <Option name="pf_route_opt_addr"/>
+          <Option name="pf_route_opt_if"/>
           <Option name="pf_route_option">none</Option>
-          <Option name="rule_name_accounting"></Option>
+          <Option name="rule_name_accounting"/>
           <Option name="stateless">False</Option>
           <Option name="tagobject_id">id449328D924380</Option>
         </PolicyRuleOptions>
@@ -3690,9 +3867,9 @@
             <PolicyInstallScript arguments="" command="" enabled="False"/>
           </Management>
           <HostOptions>
-            <Option name="snmp_contact"></Option>
-            <Option name="snmp_description"></Option>
-            <Option name="snmp_location"></Option>
+            <Option name="snmp_contact"/>
+            <Option name="snmp_description"/>
+            <Option name="snmp_location"/>
             <Option name="use_mac_addr">false</Option>
             <Option name="use_mac_addr_filter">False</Option>
           </HostOptions>
@@ -3708,9 +3885,9 @@
             <PolicyInstallScript arguments="" command="" enabled="False"/>
           </Management>
           <HostOptions>
-            <Option name="snmp_contact"></Option>
-            <Option name="snmp_description"></Option>
-            <Option name="snmp_location"></Option>
+            <Option name="snmp_contact"/>
+            <Option name="snmp_description"/>
+            <Option name="snmp_location"/>
             <Option name="use_mac_addr">False</Option>
             <Option name="use_mac_addr_filter">False</Option>
           </HostOptions>
@@ -3726,9 +3903,9 @@
             <PolicyInstallScript arguments="" command="" enabled="False"/>
           </Management>
           <HostOptions>
-            <Option name="snmp_contact"></Option>
-            <Option name="snmp_description"></Option>
-            <Option name="snmp_location"></Option>
+            <Option name="snmp_contact"/>
+            <Option name="snmp_description"/>
+            <Option name="snmp_location"/>
             <Option name="use_mac_addr">False</Option>
             <Option name="use_mac_addr_filter">False</Option>
           </HostOptions>
@@ -3744,9 +3921,9 @@
             <PolicyInstallScript arguments="" command="" enabled="False"/>
           </Management>
           <HostOptions>
-            <Option name="snmp_contact"></Option>
-            <Option name="snmp_description"></Option>
-            <Option name="snmp_location"></Option>
+            <Option name="snmp_contact"/>
+            <Option name="snmp_description"/>
+            <Option name="snmp_location"/>
             <Option name="use_mac_addr">False</Option>
             <Option name="use_mac_addr_filter">False</Option>
           </HostOptions>
@@ -3762,9 +3939,9 @@
             <PolicyInstallScript arguments="" command="" enabled="False"/>
           </Management>
           <HostOptions>
-            <Option name="snmp_contact"></Option>
-            <Option name="snmp_description"></Option>
-            <Option name="snmp_location"></Option>
+            <Option name="snmp_contact"/>
+            <Option name="snmp_description"/>
+            <Option name="snmp_location"/>
             <Option name="use_mac_addr">false</Option>
             <Option name="use_mac_addr_filter">False</Option>
           </HostOptions>
@@ -3780,9 +3957,9 @@
             <PolicyInstallScript arguments="" command="" enabled="False"/>
           </Management>
           <HostOptions>
-            <Option name="snmp_contact"></Option>
-            <Option name="snmp_description"></Option>
-            <Option name="snmp_location"></Option>
+            <Option name="snmp_contact"/>
+            <Option name="snmp_description"/>
+            <Option name="snmp_location"/>
             <Option name="use_mac_addr">false</Option>
             <Option name="use_mac_addr_filter">False</Option>
           </HostOptions>
@@ -3798,9 +3975,9 @@
             <PolicyInstallScript arguments="" command="" enabled="False"/>
           </Management>
           <HostOptions>
-            <Option name="snmp_contact"></Option>
-            <Option name="snmp_description"></Option>
-            <Option name="snmp_location"></Option>
+            <Option name="snmp_contact"/>
+            <Option name="snmp_description"/>
+            <Option name="snmp_location"/>
             <Option name="use_mac_addr">false</Option>
             <Option name="use_mac_addr_filter">False</Option>
           </HostOptions>
@@ -3831,9 +4008,9 @@
             <PolicyInstallScript arguments="" command="" enabled="False"/>
           </Management>
           <HostOptions>
-            <Option name="snmp_contact"></Option>
-            <Option name="snmp_description"></Option>
-            <Option name="snmp_location"></Option>
+            <Option name="snmp_contact"/>
+            <Option name="snmp_description"/>
+            <Option name="snmp_location"/>
             <Option name="use_mac_addr_filter">True</Option>
           </HostOptions>
         </Host>
@@ -3848,9 +4025,9 @@
             <PolicyInstallScript arguments="" command="" enabled="False"/>
           </Management>
           <HostOptions>
-            <Option name="snmp_contact"></Option>
-            <Option name="snmp_description"></Option>
-            <Option name="snmp_location"></Option>
+            <Option name="snmp_contact"/>
+            <Option name="snmp_description"/>
+            <Option name="snmp_location"/>
             <Option name="use_mac_addr_filter">True</Option>
           </HostOptions>
         </Host>
@@ -3865,9 +4042,9 @@
             <PolicyInstallScript arguments="" command="" enabled="False"/>
           </Management>
           <HostOptions>
-            <Option name="snmp_contact"></Option>
-            <Option name="snmp_description"></Option>
-            <Option name="snmp_location"></Option>
+            <Option name="snmp_contact"/>
+            <Option name="snmp_description"/>
+            <Option name="snmp_location"/>
             <Option name="use_mac_addr_filter">True</Option>
           </HostOptions>
         </Host>
@@ -3882,9 +4059,9 @@
             <PolicyInstallScript arguments="" command="" enabled="False"/>
           </Management>
           <HostOptions>
-            <Option name="snmp_contact"></Option>
-            <Option name="snmp_description"></Option>
-            <Option name="snmp_location"></Option>
+            <Option name="snmp_contact"/>
+            <Option name="snmp_description"/>
+            <Option name="snmp_location"/>
             <Option name="use_mac_addr_filter">True</Option>
           </HostOptions>
         </Host>
@@ -3900,9 +4077,9 @@
             <PolicyInstallScript arguments="" command="" enabled="False"/>
           </Management>
           <HostOptions>
-            <Option name="snmp_contact"></Option>
-            <Option name="snmp_description"></Option>
-            <Option name="snmp_location"></Option>
+            <Option name="snmp_contact"/>
+            <Option name="snmp_description"/>
+            <Option name="snmp_location"/>
             <Option name="use_mac_addr_filter">True</Option>
           </HostOptions>
         </Host>
@@ -3983,9 +4160,9 @@
             <PolicyInstallScript arguments="" command="" enabled="False"/>
           </Management>
           <HostOptions>
-            <Option name="snmp_contact"></Option>
-            <Option name="snmp_description"></Option>
-            <Option name="snmp_location"></Option>
+            <Option name="snmp_contact"/>
+            <Option name="snmp_description"/>
+            <Option name="snmp_location"/>
             <Option name="use_mac_addr_filter">False</Option>
           </HostOptions>
         </Host>
@@ -4004,9 +4181,9 @@
             <PolicyInstallScript arguments="" command="" enabled="False"/>
           </Management>
           <HostOptions>
-            <Option name="snmp_contact"></Option>
-            <Option name="snmp_description"></Option>
-            <Option name="snmp_location"></Option>
+            <Option name="snmp_contact"/>
+            <Option name="snmp_description"/>
+            <Option name="snmp_location"/>
             <Option name="use_mac_addr_filter">False</Option>
           </HostOptions>
         </Host>
@@ -4029,9 +4206,9 @@
             <PolicyInstallScript arguments="" command="" enabled="False"/>
           </Management>
           <HostOptions>
-            <Option name="snmp_contact"></Option>
-            <Option name="snmp_description"></Option>
-            <Option name="snmp_location"></Option>
+            <Option name="snmp_contact"/>
+            <Option name="snmp_description"/>
+            <Option name="snmp_location"/>
             <Option name="use_mac_addr_filter">False</Option>
           </HostOptions>
         </Host>
@@ -4046,9 +4223,9 @@
             <PolicyInstallScript arguments="" command="" enabled="False"/>
           </Management>
           <HostOptions>
-            <Option name="snmp_contact"></Option>
-            <Option name="snmp_description"></Option>
-            <Option name="snmp_location"></Option>
+            <Option name="snmp_contact"/>
+            <Option name="snmp_description"/>
+            <Option name="snmp_location"/>
             <Option name="use_mac_addr_filter">False</Option>
           </HostOptions>
         </Host>
@@ -4063,9 +4240,9 @@
             <PolicyInstallScript arguments="" command="" enabled="False"/>
           </Management>
           <HostOptions>
-            <Option name="snmp_contact"></Option>
-            <Option name="snmp_description"></Option>
-            <Option name="snmp_location"></Option>
+            <Option name="snmp_contact"/>
+            <Option name="snmp_description"/>
+            <Option name="snmp_location"/>
             <Option name="use_mac_addr">False</Option>
             <Option name="use_mac_addr_filter">False</Option>
           </HostOptions>
@@ -4081,9 +4258,9 @@
             <PolicyInstallScript arguments="" command="" enabled="False"/>
           </Management>
           <HostOptions>
-            <Option name="snmp_contact"></Option>
-            <Option name="snmp_description"></Option>
-            <Option name="snmp_location"></Option>
+            <Option name="snmp_contact"/>
+            <Option name="snmp_description"/>
+            <Option name="snmp_location"/>
             <Option name="use_mac_addr">False</Option>
             <Option name="use_mac_addr_filter">False</Option>
           </HostOptions>
@@ -4099,9 +4276,9 @@
             <PolicyInstallScript arguments="" command="" enabled="False"/>
           </Management>
           <HostOptions>
-            <Option name="snmp_contact"></Option>
-            <Option name="snmp_description"></Option>
-            <Option name="snmp_location"></Option>
+            <Option name="snmp_contact"/>
+            <Option name="snmp_description"/>
+            <Option name="snmp_location"/>
             <Option name="use_mac_addr">False</Option>
             <Option name="use_mac_addr_filter">False</Option>
           </HostOptions>
@@ -4117,9 +4294,9 @@
             <PolicyInstallScript arguments="" command="" enabled="False"/>
           </Management>
           <HostOptions>
-            <Option name="snmp_contact"></Option>
-            <Option name="snmp_description"></Option>
-            <Option name="snmp_location"></Option>
+            <Option name="snmp_contact"/>
+            <Option name="snmp_description"/>
+            <Option name="snmp_location"/>
             <Option name="use_mac_addr">False</Option>
             <Option name="use_mac_addr_filter">False</Option>
           </HostOptions>
@@ -4135,9 +4312,9 @@
             <PolicyInstallScript arguments="" command="" enabled="False"/>
           </Management>
           <HostOptions>
-            <Option name="snmp_contact"></Option>
-            <Option name="snmp_description"></Option>
-            <Option name="snmp_location"></Option>
+            <Option name="snmp_contact"/>
+            <Option name="snmp_description"/>
+            <Option name="snmp_location"/>
             <Option name="use_mac_addr">False</Option>
             <Option name="use_mac_addr_filter">False</Option>
           </HostOptions>
@@ -4153,9 +4330,9 @@
             <PolicyInstallScript arguments="" command="" enabled="False"/>
           </Management>
           <HostOptions>
-            <Option name="snmp_contact"></Option>
-            <Option name="snmp_description"></Option>
-            <Option name="snmp_location"></Option>
+            <Option name="snmp_contact"/>
+            <Option name="snmp_description"/>
+            <Option name="snmp_location"/>
             <Option name="use_mac_addr">false</Option>
             <Option name="use_mac_addr_filter">False</Option>
           </HostOptions>
@@ -4229,9 +4406,9 @@
             <PolicyInstallScript arguments="" command="" enabled="False"/>
           </Management>
           <HostOptions>
-            <Option name="snmp_contact"></Option>
-            <Option name="snmp_description"></Option>
-            <Option name="snmp_location"></Option>
+            <Option name="snmp_contact"/>
+            <Option name="snmp_description"/>
+            <Option name="snmp_location"/>
             <Option name="use_mac_addr">false</Option>
             <Option name="use_mac_addr_filter">False</Option>
           </HostOptions>
@@ -4294,9 +4471,9 @@
             <PolicyInstallScript arguments="" command="" enabled="False"/>
           </Management>
           <HostOptions>
-            <Option name="snmp_contact"></Option>
-            <Option name="snmp_description"></Option>
-            <Option name="snmp_location"></Option>
+            <Option name="snmp_contact"/>
+            <Option name="snmp_description"/>
+            <Option name="snmp_location"/>
             <Option name="use_mac_addr_filter">True</Option>
           </HostOptions>
         </Host>
@@ -4312,9 +4489,9 @@
             <PolicyInstallScript arguments="" command="" enabled="False"/>
           </Management>
           <HostOptions>
-            <Option name="snmp_contact"></Option>
-            <Option name="snmp_description"></Option>
-            <Option name="snmp_location"></Option>
+            <Option name="snmp_contact"/>
+            <Option name="snmp_description"/>
+            <Option name="snmp_location"/>
             <Option name="use_mac_addr_filter">True</Option>
           </HostOptions>
         </Host>
@@ -4329,9 +4506,9 @@
             <PolicyInstallScript arguments="" command="" enabled="False"/>
           </Management>
           <HostOptions>
-            <Option name="snmp_contact"></Option>
-            <Option name="snmp_description"></Option>
-            <Option name="snmp_location"></Option>
+            <Option name="snmp_contact"/>
+            <Option name="snmp_description"/>
+            <Option name="snmp_location"/>
             <Option name="use_mac_addr">false</Option>
             <Option name="use_mac_addr_filter">False</Option>
           </HostOptions>
@@ -4373,9 +4550,9 @@
             <PolicyInstallScript arguments="" command="" enabled="False"/>
           </Management>
           <HostOptions>
-            <Option name="snmp_contact"></Option>
-            <Option name="snmp_description"></Option>
-            <Option name="snmp_location"></Option>
+            <Option name="snmp_contact"/>
+            <Option name="snmp_description"/>
+            <Option name="snmp_location"/>
             <Option name="use_mac_addr_filter">False</Option>
           </HostOptions>
         </Host>
@@ -4663,109 +4840,109 @@
       </ServiceGroup>
       <ServiceGroup id="stdid13_1" name="Custom" comment="" ro="False">
         <CustomService id="id3B64FE22" name="talk" comment="Talk support" ro="False" protocol="any" address_family="ipv4">
-          <CustomServiceCommand platform="Undefined"></CustomServiceCommand>
-          <CustomServiceCommand platform="fwsm"></CustomServiceCommand>
-          <CustomServiceCommand platform="iosacl"></CustomServiceCommand>
-          <CustomServiceCommand platform="ipf"></CustomServiceCommand>
-          <CustomServiceCommand platform="ipfilter"></CustomServiceCommand>
-          <CustomServiceCommand platform="ipfw"></CustomServiceCommand>
+          <CustomServiceCommand platform="Undefined"/>
+          <CustomServiceCommand platform="fwsm"/>
+          <CustomServiceCommand platform="iosacl"/>
+          <CustomServiceCommand platform="ipf"/>
+          <CustomServiceCommand platform="ipfilter"/>
+          <CustomServiceCommand platform="ipfw"/>
           <CustomServiceCommand platform="iptables">-m ip_conntrack_talk -m ip_nat_talk</CustomServiceCommand>
-          <CustomServiceCommand platform="pf"></CustomServiceCommand>
-          <CustomServiceCommand platform="pix"></CustomServiceCommand>
-          <CustomServiceCommand platform="unknown"></CustomServiceCommand>
+          <CustomServiceCommand platform="pf"/>
+          <CustomServiceCommand platform="pix"/>
+          <CustomServiceCommand platform="unknown"/>
         </CustomService>
         <CustomService id="id3D34B329" name="test-custom-1" comment="" ro="False" protocol="any" address_family="ipv4">
-          <CustomServiceCommand platform="fwsm"></CustomServiceCommand>
-          <CustomServiceCommand platform="iosacl"></CustomServiceCommand>
-          <CustomServiceCommand platform="ipf"></CustomServiceCommand>
-          <CustomServiceCommand platform="ipfw"></CustomServiceCommand>
+          <CustomServiceCommand platform="fwsm"/>
+          <CustomServiceCommand platform="iosacl"/>
+          <CustomServiceCommand platform="ipf"/>
+          <CustomServiceCommand platform="ipfw"/>
           <CustomServiceCommand platform="iptables">-p tcp -m state --state ESTABLISHED --tcp-flags SYN,ACK,RST,URG ACK</CustomServiceCommand>
-          <CustomServiceCommand platform="pf"></CustomServiceCommand>
-          <CustomServiceCommand platform="pix"></CustomServiceCommand>
-          <CustomServiceCommand platform="unknown"></CustomServiceCommand>
+          <CustomServiceCommand platform="pf"/>
+          <CustomServiceCommand platform="pix"/>
+          <CustomServiceCommand platform="unknown"/>
         </CustomService>
         <CustomService id="id3D34B32A" name="test-custom-2" comment="" ro="False" protocol="any" address_family="ipv4">
-          <CustomServiceCommand platform="fwsm"></CustomServiceCommand>
-          <CustomServiceCommand platform="iosacl"></CustomServiceCommand>
-          <CustomServiceCommand platform="ipf"></CustomServiceCommand>
-          <CustomServiceCommand platform="ipfw"></CustomServiceCommand>
+          <CustomServiceCommand platform="fwsm"/>
+          <CustomServiceCommand platform="iosacl"/>
+          <CustomServiceCommand platform="ipf"/>
+          <CustomServiceCommand platform="ipfw"/>
           <CustomServiceCommand platform="iptables">-p tcp -m state --state ESTABLISHED --tcp-flags SYN,FIN,RST,URG,PSH RST</CustomServiceCommand>
-          <CustomServiceCommand platform="pf"></CustomServiceCommand>
-          <CustomServiceCommand platform="pix"></CustomServiceCommand>
-          <CustomServiceCommand platform="unknown"></CustomServiceCommand>
+          <CustomServiceCommand platform="pf"/>
+          <CustomServiceCommand platform="pix"/>
+          <CustomServiceCommand platform="unknown"/>
         </CustomService>
         <CustomService id="id3FADE3CC" name="string" comment="" ro="False" protocol="any" address_family="ipv4">
-          <CustomServiceCommand platform="fwsm"></CustomServiceCommand>
-          <CustomServiceCommand platform="iosacl"></CustomServiceCommand>
+          <CustomServiceCommand platform="fwsm"/>
+          <CustomServiceCommand platform="iosacl"/>
           <CustomServiceCommand platform="ipf">-m string --string test_pattern</CustomServiceCommand>
-          <CustomServiceCommand platform="ipfw"></CustomServiceCommand>
+          <CustomServiceCommand platform="ipfw"/>
           <CustomServiceCommand platform="iptables">-m string --string test_pattern</CustomServiceCommand>
-          <CustomServiceCommand platform="pf"></CustomServiceCommand>
-          <CustomServiceCommand platform="pix"></CustomServiceCommand>
-          <CustomServiceCommand platform="unknown"></CustomServiceCommand>
+          <CustomServiceCommand platform="pf"/>
+          <CustomServiceCommand platform="pix"/>
+          <CustomServiceCommand platform="unknown"/>
         </CustomService>
         <CustomService id="id4003B1AC" name="old AIM session" comment="" ro="False" protocol="any" address_family="ipv4">
-          <CustomServiceCommand platform="fwsm"></CustomServiceCommand>
-          <CustomServiceCommand platform="iosacl"></CustomServiceCommand>
-          <CustomServiceCommand platform="ipf"></CustomServiceCommand>
-          <CustomServiceCommand platform="ipfw"></CustomServiceCommand>
+          <CustomServiceCommand platform="fwsm"/>
+          <CustomServiceCommand platform="iosacl"/>
+          <CustomServiceCommand platform="ipf"/>
+          <CustomServiceCommand platform="ipfw"/>
           <CustomServiceCommand platform="iptables">-p tcp ! --syn -dport 5190 -m state --state NEW</CustomServiceCommand>
-          <CustomServiceCommand platform="pf"></CustomServiceCommand>
-          <CustomServiceCommand platform="pix"></CustomServiceCommand>
-          <CustomServiceCommand platform="unknown"></CustomServiceCommand>
+          <CustomServiceCommand platform="pf"/>
+          <CustomServiceCommand platform="pix"/>
+          <CustomServiceCommand platform="unknown"/>
         </CustomService>
         <CustomService id="id45862X16372" name="ipv6 source route" comment="" ro="False" protocol="any" address_family="ipv6">
-          <CustomServiceCommand platform="fwsm"></CustomServiceCommand>
-          <CustomServiceCommand platform="iosacl"></CustomServiceCommand>
-          <CustomServiceCommand platform="ipf"></CustomServiceCommand>
-          <CustomServiceCommand platform="ipfw"></CustomServiceCommand>
+          <CustomServiceCommand platform="fwsm"/>
+          <CustomServiceCommand platform="iosacl"/>
+          <CustomServiceCommand platform="ipf"/>
+          <CustomServiceCommand platform="ipfw"/>
           <CustomServiceCommand platform="iptables">-m rt --rt-type 0</CustomServiceCommand>
-          <CustomServiceCommand platform="pf"></CustomServiceCommand>
-          <CustomServiceCommand platform="pix"></CustomServiceCommand>
-          <CustomServiceCommand platform="unknown"></CustomServiceCommand>
+          <CustomServiceCommand platform="pf"/>
+          <CustomServiceCommand platform="pix"/>
+          <CustomServiceCommand platform="unknown"/>
         </CustomService>
         <CustomService id="id45863X16372" name="reject syn-ack" comment="" ro="False" protocol="tcp" address_family="ipv4">
-          <CustomServiceCommand platform="fwsm"></CustomServiceCommand>
-          <CustomServiceCommand platform="iosacl"></CustomServiceCommand>
-          <CustomServiceCommand platform="ipf"></CustomServiceCommand>
-          <CustomServiceCommand platform="ipfw"></CustomServiceCommand>
+          <CustomServiceCommand platform="fwsm"/>
+          <CustomServiceCommand platform="iosacl"/>
+          <CustomServiceCommand platform="ipf"/>
+          <CustomServiceCommand platform="ipfw"/>
           <CustomServiceCommand platform="iptables">-m tcp --tcp-flags SYN,ACK SYN,ACK -m state --state NEW</CustomServiceCommand>
-          <CustomServiceCommand platform="pf"></CustomServiceCommand>
-          <CustomServiceCommand platform="pix"></CustomServiceCommand>
-          <CustomServiceCommand platform="unknown"></CustomServiceCommand>
+          <CustomServiceCommand platform="pf"/>
+          <CustomServiceCommand platform="pix"/>
+          <CustomServiceCommand platform="unknown"/>
         </CustomService>
         <CustomService id="id57956X8289" name="owner_anonymous tcp" comment="" ro="False" protocol="tcp" address_family="ipv4">
-          <CustomServiceCommand platform="fwsm"></CustomServiceCommand>
-          <CustomServiceCommand platform="iosacl"></CustomServiceCommand>
-          <CustomServiceCommand platform="ipf"></CustomServiceCommand>
-          <CustomServiceCommand platform="ipfw"></CustomServiceCommand>
+          <CustomServiceCommand platform="fwsm"/>
+          <CustomServiceCommand platform="iosacl"/>
+          <CustomServiceCommand platform="ipf"/>
+          <CustomServiceCommand platform="ipfw"/>
           <CustomServiceCommand platform="iptables">-m owner --uid-owner anonymous</CustomServiceCommand>
-          <CustomServiceCommand platform="pf"></CustomServiceCommand>
-          <CustomServiceCommand platform="pix"></CustomServiceCommand>
-          <CustomServiceCommand platform="procurve_acl"></CustomServiceCommand>
-          <CustomServiceCommand platform="unknown"></CustomServiceCommand>
+          <CustomServiceCommand platform="pf"/>
+          <CustomServiceCommand platform="pix"/>
+          <CustomServiceCommand platform="procurve_acl"/>
+          <CustomServiceCommand platform="unknown"/>
         </CustomService>
         <CustomService id="id248805X9517" name="owner_anonymous udp" comment="" ro="False" protocol="udp" address_family="ipv4">
-          <CustomServiceCommand platform="fwsm"></CustomServiceCommand>
-          <CustomServiceCommand platform="iosacl"></CustomServiceCommand>
-          <CustomServiceCommand platform="ipf"></CustomServiceCommand>
-          <CustomServiceCommand platform="ipfw"></CustomServiceCommand>
+          <CustomServiceCommand platform="fwsm"/>
+          <CustomServiceCommand platform="iosacl"/>
+          <CustomServiceCommand platform="ipf"/>
+          <CustomServiceCommand platform="ipfw"/>
           <CustomServiceCommand platform="iptables">-m owner --uid-owner anonymous</CustomServiceCommand>
-          <CustomServiceCommand platform="pf"></CustomServiceCommand>
-          <CustomServiceCommand platform="pix"></CustomServiceCommand>
-          <CustomServiceCommand platform="procurve_acl"></CustomServiceCommand>
-          <CustomServiceCommand platform="unknown"></CustomServiceCommand>
+          <CustomServiceCommand platform="pf"/>
+          <CustomServiceCommand platform="pix"/>
+          <CustomServiceCommand platform="procurve_acl"/>
+          <CustomServiceCommand platform="unknown"/>
         </CustomService>
         <CustomService id="id631131X9517" name="owner_anonymous" comment="" ro="False" protocol="any" address_family="ipv4">
-          <CustomServiceCommand platform="fwsm"></CustomServiceCommand>
-          <CustomServiceCommand platform="iosacl"></CustomServiceCommand>
-          <CustomServiceCommand platform="ipf"></CustomServiceCommand>
-          <CustomServiceCommand platform="ipfw"></CustomServiceCommand>
+          <CustomServiceCommand platform="fwsm"/>
+          <CustomServiceCommand platform="iosacl"/>
+          <CustomServiceCommand platform="ipf"/>
+          <CustomServiceCommand platform="ipfw"/>
           <CustomServiceCommand platform="iptables">-m owner --uid-owner anonymous</CustomServiceCommand>
-          <CustomServiceCommand platform="pf"></CustomServiceCommand>
-          <CustomServiceCommand platform="pix"></CustomServiceCommand>
-          <CustomServiceCommand platform="procurve_acl"></CustomServiceCommand>
-          <CustomServiceCommand platform="unknown"></CustomServiceCommand>
+          <CustomServiceCommand platform="pf"/>
+          <CustomServiceCommand platform="pix"/>
+          <CustomServiceCommand platform="procurve_acl"/>
+          <CustomServiceCommand platform="unknown"/>
         </CustomService>
       </ServiceGroup>
     </ServiceGroup>
@@ -4791,6 +4968,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3CEBFE6E" disabled="False" group="" position="1" action="Translate" comment="">
@@ -4812,6 +4992,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3CEBFFA8" disabled="False" group="" position="2" action="Translate" comment="">
@@ -4833,6 +5016,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3CECB632" disabled="True" group="" position="3" action="Translate" comment="">
@@ -4854,6 +5040,9 @@
             <TSrv neg="False">
               <ServiceRef ref="id3B5009F7"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3CECB708" disabled="False" group="" position="4" action="Translate" comment="">
@@ -4875,6 +5064,9 @@
             <TSrv neg="False">
               <ServiceRef ref="id3B5009F7"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3D20E9DB" disabled="False" group="" position="5" action="Translate" comment="">
@@ -4897,6 +5089,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="nat-firewall2-1" disabled="False" group="" position="6" action="Translate" comment="">
@@ -4918,6 +5113,9 @@
             <TSrv neg="False">
               <ServiceRef ref="tcp-SMTP"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3F3BCA90" disabled="False" group="" position="7" action="Translate" comment="">
@@ -4939,6 +5137,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3F3BCAD1" disabled="False" group="" position="8" action="Translate" comment="">
@@ -4960,6 +5161,9 @@
             <TSrv neg="False">
               <ServiceRef ref="icmp-ping_request"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3CE71A93" disabled="False" group="" position="9" action="Translate" comment="">
@@ -4981,6 +5185,9 @@
             <TSrv neg="False">
               <ServiceRef ref="id3CE719F5"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3CE71B09" disabled="False" group="" position="10" action="Translate" comment="">
@@ -5002,6 +5209,9 @@
             <TSrv neg="False">
               <ServiceRef ref="id3CE719F5"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3E0AAAF2" disabled="False" group="" position="11" action="Translate" comment="">
@@ -5023,6 +5233,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3E0AADCD" disabled="False" group="" position="12" action="Translate" comment="">
@@ -5044,6 +5257,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3E69B092" disabled="False" group="" position="13" action="Translate" comment="">
@@ -5065,6 +5281,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id445F52DE31658" disabled="False" group="" position="14" action="Translate" comment="">
@@ -5086,6 +5305,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3CE7198B" disabled="False" group="" position="15" action="Translate" comment="">
@@ -5107,6 +5329,9 @@
             <TSrv neg="False">
               <ServiceRef ref="id3CE71594"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3CE719A3" disabled="False" group="" position="16" action="Translate" comment="">
@@ -5128,6 +5353,9 @@
             <TSrv neg="False">
               <ServiceRef ref="id3CE717A0"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3CE71AF1" disabled="False" group="" position="17" action="Translate" comment="">
@@ -5149,6 +5377,9 @@
             <TSrv neg="False">
               <ServiceRef ref="id3CE719F3"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3CE71B86" disabled="False" group="" position="18" action="Translate" comment="">
@@ -5170,6 +5401,9 @@
             <TSrv neg="False">
               <ServiceRef ref="id3CE719F3"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3EA8DC47" disabled="False" group="" position="19" action="Translate" comment="">
@@ -5191,6 +5425,9 @@
             <TSrv neg="False">
               <ServiceRef ref="tcp-HTTP"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3EA8DB2C" disabled="False" group="" position="20" action="Translate" comment="">
@@ -5212,6 +5449,9 @@
             <TSrv neg="False">
               <ServiceRef ref="tcp-HTTP"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3EF41DD4" disabled="False" group="" position="21" action="Translate" comment="should use multiport&#10;and account for&#10;no more than 15 ports&#10;per rule">
@@ -5233,6 +5473,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3EF4288E" disabled="False" group="" position="22" action="Translate" comment="should use multiport&#10;and account for&#10;no more than 15 ports&#10;per rule">
@@ -5254,6 +5497,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <RuleSetOptions/>
@@ -5552,10 +5798,10 @@
               <Option name="connlimit_value">2</Option>
               <Option name="firewall_is_part_of_any_and_networks">False</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -5588,10 +5834,10 @@
               <Option name="hashlimit_suffix">/second</Option>
               <Option name="hashlimit_value">2</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -5619,10 +5865,10 @@
               <Option name="connlimit_value">0</Option>
               <Option name="firewall_is_part_of_any_and_networks">False</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">False</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -5654,15 +5900,15 @@
               <Option name="hashlimit_gcinterval">0</Option>
               <Option name="hashlimit_max">0</Option>
               <Option name="hashlimit_mode">dstip</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -5694,15 +5940,15 @@
               <Option name="hashlimit_gcinterval">0</Option>
               <Option name="hashlimit_max">0</Option>
               <Option name="hashlimit_mode">dstip</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -5734,15 +5980,15 @@
               <Option name="hashlimit_gcinterval">0</Option>
               <Option name="hashlimit_max">0</Option>
               <Option name="hashlimit_mode">dstip</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -5774,15 +6020,15 @@
               <Option name="hashlimit_gcinterval">0</Option>
               <Option name="hashlimit_max">0</Option>
               <Option name="hashlimit_mode">dstip</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -5814,15 +6060,15 @@
               <Option name="hashlimit_gcinterval">0</Option>
               <Option name="hashlimit_max">0</Option>
               <Option name="hashlimit_mode">dstip</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -5854,15 +6100,15 @@
               <Option name="hashlimit_gcinterval">0</Option>
               <Option name="hashlimit_max">0</Option>
               <Option name="hashlimit_mode">dstip</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -5887,10 +6133,10 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_limit_suffix"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_limit_suffix"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -6037,10 +6283,10 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="action_on_reject"/>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_prefix"/>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id3E0AA611" disabled="False" group="" log="False" position="30" action="Accept" direction="Both" comment="">
@@ -6078,10 +6324,10 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="action_on_reject"/>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_prefix"/>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id3E0AA504" disabled="False" group="" log="False" position="32" action="Accept" direction="Both" comment="">
@@ -6228,10 +6474,10 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="action_on_reject"/>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_prefix"/>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id445FAA6D31658" disabled="False" group="" log="False" position="40" action="Accept" direction="Both" comment="">
@@ -6291,10 +6537,10 @@
               <IntervalRef ref="id3D6864D0"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="action_on_reject"/>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_prefix"/>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id3FB8455E" disabled="False" group="" log="False" position="43" action="Accept" direction="Both" comment="">
@@ -6374,10 +6620,10 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="action_on_reject"/>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_prefix"/>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id3CD8770E" disabled="False" group="" log="False" position="47" action="Accept" direction="Both" comment="">
@@ -6398,10 +6644,10 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="action_on_reject"/>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_prefix"/>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id3CD87B1E" disabled="False" group="" log="False" position="48" action="Accept" direction="Both" comment="">
@@ -6422,10 +6668,10 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="action_on_reject"/>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_prefix"/>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id3E1FD93A" disabled="False" group="" log="False" position="49" action="Accept" direction="Both" comment="group &quot;special combined srv&quot;&#10;has couple of UDP services,&#10;plus &quot;ALL UDP&quot; service, which has&#10;empty ports specs. This is special&#10;case for multiport.">
@@ -6518,10 +6764,10 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="action_on_reject"/>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_prefix"/>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id3CE894DA" disabled="False" group="" log="False" position="54" action="Accept" direction="Both" comment="similar to a standard 'masquerading'&#10;rule, but not so permissive as it does &#10;not allow access to the firewall">
@@ -6596,11 +6842,11 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="action_on_reject"/>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_limit_suffix"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_limit_suffix"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -6626,18 +6872,18 @@
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">False</Option>
           <Option name="action_on_reject">ICMP net unreachable</Option>
-          <Option name="activationCmd"></Option>
+          <Option name="activationCmd"/>
           <Option name="add_mgmt_ssh_rule_when_stoped">True</Option>
           <Option name="add_rules_for_ipv6_neighbor_discovery">False</Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">False</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
           <Option name="classify_mark_terminating">False</Option>
           <Option name="clear_unknown_interfaces">False</Option>
           <Option name="cmdline">-v</Option>
-          <Option name="compiler"></Option>
+          <Option name="compiler"/>
           <Option name="configure_bonding_interfaces">False</Option>
           <Option name="configure_bridge_interfaces">False</Option>
           <Option name="configure_interfaces">True</Option>
@@ -6645,39 +6891,39 @@
           <Option name="debug">False</Option>
           <Option name="drop_invalid">True</Option>
           <Option name="dyn_addr">False</Option>
-          <Option name="epilog_script"></Option>
-          <Option name="firewall_dir"></Option>
+          <Option name="epilog_script"/>
+          <Option name="firewall_dir"/>
           <Option name="firewall_is_part_of_any">True</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="ignore_empty_groups">False</Option>
-          <Option name="inst_cmdline"></Option>
-          <Option name="inst_script"></Option>
-          <Option name="install_script"></Option>
+          <Option name="inst_cmdline"/>
+          <Option name="inst_script"/>
+          <Option name="install_script"/>
           <Option name="ipv4_6_order">ipv4_first</Option>
           <Option name="limit_suffix">/second</Option>
           <Option name="limit_value">5</Option>
-          <Option name="linux24_accept_redirects"></Option>
-          <Option name="linux24_accept_source_route"></Option>
-          <Option name="linux24_icmp_echo_ignore_all"></Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
-          <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
-          <Option name="linux24_ip_dynaddr"></Option>
+          <Option name="linux24_accept_redirects"/>
+          <Option name="linux24_accept_source_route"/>
+          <Option name="linux24_icmp_echo_ignore_all"/>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
+          <Option name="linux24_icmp_ignore_bogus_error_responses"/>
+          <Option name="linux24_ip_dynaddr"/>
           <Option name="linux24_ip_forward">1</Option>
-          <Option name="linux24_log_martians"></Option>
+          <Option name="linux24_log_martians"/>
           <Option name="linux24_path_ip">/usr/local/sbin/ip</Option>
           <Option name="linux24_path_iptables">/usr/local/sbin/iptables</Option>
           <Option name="linux24_path_logger">/bin/logger</Option>
-          <Option name="linux24_path_lsmod"></Option>
+          <Option name="linux24_path_lsmod"/>
           <Option name="linux24_path_modprobe">/usr/local/sbin/modprobe</Option>
-          <Option name="linux24_rp_filter"></Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_rp_filter"/>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">30</Option>
           <Option name="linux24_tcp_keepalive_interval">1800</Option>
-          <Option name="linux24_tcp_sack"></Option>
-          <Option name="linux24_tcp_syncookies"></Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_sack"/>
+          <Option name="linux24_tcp_syncookies"/>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">True</Option>
           <Option name="local_nat">False</Option>
           <Option name="log_all">False</Option>
@@ -6695,17 +6941,17 @@
           <Option name="mgmt_ssh">True</Option>
           <Option name="no_iochains_for_any">False</Option>
           <Option name="no_optimisation">False</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="platform">iptables</Option>
           <Option name="prolog_place">top</Option>
-          <Option name="prolog_script"></Option>
-          <Option name="scpArgs"></Option>
-          <Option name="script_env_path"></Option>
-          <Option name="script_name_on_firewall"></Option>
-          <Option name="snmp_contact"></Option>
-          <Option name="snmp_description"></Option>
-          <Option name="snmp_location"></Option>
-          <Option name="sshArgs"></Option>
+          <Option name="prolog_script"/>
+          <Option name="scpArgs"/>
+          <Option name="script_env_path"/>
+          <Option name="script_name_on_firewall"/>
+          <Option name="snmp_contact"/>
+          <Option name="snmp_description"/>
+          <Option name="snmp_location"/>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -6736,6 +6982,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3AFADC09" disabled="False" group="" position="1" action="Translate" comment="">
@@ -6757,6 +7006,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3CD23959" disabled="False" group="" position="2" action="Translate" comment="">
@@ -6778,6 +7030,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3D6E78AD" disabled="False" group="" position="3" action="Translate" comment="">
@@ -6799,6 +7054,9 @@
             <TSrv neg="False">
               <ServiceRef ref="tcp-HTTP"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3B1328FB" disabled="False" group="" position="4" action="Translate" comment="">
@@ -6820,6 +7078,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3E7ABEEA" disabled="False" group="" position="5" action="Translate" comment="">
@@ -6842,6 +7103,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3AF5AAD3" disabled="False" group="" position="6" action="Translate" comment="">
@@ -6863,6 +7127,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3D6E7B3D" disabled="False" group="" position="7" action="Translate" comment="">
@@ -6884,6 +7151,9 @@
             <TSrv neg="False">
               <ServiceRef ref="tcp-HTTP"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3CCA1B57" disabled="False" group="" position="8" action="Translate" comment="">
@@ -6905,6 +7175,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3EB38983" disabled="False" group="" position="9" action="Translate" comment="">
@@ -6927,6 +7200,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3B50F7CB" disabled="False" group="" position="10" action="Translate" comment="">
@@ -6948,6 +7224,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3BD8D94B" disabled="False" group="" position="11" action="Translate" comment="">
@@ -6969,6 +7248,9 @@
             <TSrv neg="False">
               <ServiceRef ref="id3B5009F7"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3BD8D9DD" disabled="False" group="" position="12" action="Translate" comment="">
@@ -6990,6 +7272,9 @@
             <TSrv neg="False">
               <ServiceRef ref="id3B5009F7"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3BBC0EA4" disabled="False" group="" position="13" action="Translate" comment="">
@@ -7011,6 +7296,9 @@
             <TSrv neg="False">
               <ServiceRef ref="id3B5009F7"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3BBC0F93" disabled="False" group="" position="14" action="Translate" comment="">
@@ -7032,6 +7320,9 @@
             <TSrv neg="False">
               <ServiceRef ref="id3B5009F7"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3BC6BCE5" disabled="False" group="" position="15" action="Translate" comment="">
@@ -7053,6 +7344,9 @@
             <TSrv neg="False">
               <ServiceRef ref="id3B5009F7"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3D331552" disabled="False" group="" position="16" action="Translate" comment="">
@@ -7078,6 +7372,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3EB38BC6" disabled="False" group="" position="17" action="Translate" comment="">
@@ -7100,6 +7397,9 @@
             <TSrv neg="False">
               <ServiceRef ref="id3B5009F7"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3EB38A91" disabled="False" group="" position="18" action="Translate" comment="">
@@ -7122,6 +7422,9 @@
             <TSrv neg="False">
               <ServiceRef ref="id3B5009F7"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <RuleSetOptions/>
@@ -7156,15 +7459,15 @@
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">True</Option>
               <Option name="hashlimit_mode_srcport">True</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
               <Option name="hashlimit_suffix">/hour</Option>
               <Option name="hashlimit_value">1</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -7198,15 +7501,15 @@
               <Option name="hashlimit_mode_dstport">True</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
               <Option name="hashlimit_suffix">/hour</Option>
               <Option name="hashlimit_value">1</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -7508,10 +7811,10 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="limit_suffix">/minute</Option>
               <Option name="limit_value">10</Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -7534,13 +7837,13 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="firewall_is_part_of_any_and_networks">False</Option>
               <Option name="limit_burst">0</Option>
               <Option name="limit_suffix">/minute</Option>
               <Option name="limit_value">10</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -7564,13 +7867,13 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="firewall_is_part_of_any_and_networks">False</Option>
               <Option name="limit_burst">0</Option>
               <Option name="limit_suffix">/minute</Option>
               <Option name="limit_value">10</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">False</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -8089,18 +8392,18 @@
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
           <Option name="action_on_reject">ICMP net unreachable</Option>
-          <Option name="activationCmd"></Option>
+          <Option name="activationCmd"/>
           <Option name="add_mgmt_ssh_rule_when_stoped">False</Option>
           <Option name="add_rules_for_ipv6_neighbor_discovery">False</Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">True</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
           <Option name="classify_mark_terminating">False</Option>
           <Option name="clear_unknown_interfaces">False</Option>
           <Option name="cmdline">-xt</Option>
-          <Option name="compiler"></Option>
+          <Option name="compiler"/>
           <Option name="configure_bonding_interfaces">False</Option>
           <Option name="configure_bridge_interfaces">False</Option>
           <Option name="configure_interfaces">True</Option>
@@ -8108,40 +8411,40 @@
           <Option name="debug">False</Option>
           <Option name="drop_invalid">True</Option>
           <Option name="dyn_addr">False</Option>
-          <Option name="epilog_script"></Option>
-          <Option name="firewall_dir"></Option>
+          <Option name="epilog_script"/>
+          <Option name="firewall_dir"/>
           <Option name="firewall_is_part_of_any">True</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="ignore_empty_groups">False</Option>
-          <Option name="inst_cmdline"></Option>
-          <Option name="inst_script"></Option>
-          <Option name="install_script"></Option>
-          <Option name="ipt_mangle_only_rulesets"></Option>
+          <Option name="inst_cmdline"/>
+          <Option name="inst_script"/>
+          <Option name="install_script"/>
+          <Option name="ipt_mangle_only_rulesets"/>
           <Option name="ipv4_6_order">ipv4_first</Option>
           <Option name="limit_suffix">/second</Option>
           <Option name="limit_value">0</Option>
-          <Option name="linux24_accept_redirects"></Option>
-          <Option name="linux24_accept_source_route"></Option>
-          <Option name="linux24_icmp_echo_ignore_all"></Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
-          <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
-          <Option name="linux24_ip_dynaddr"></Option>
-          <Option name="linux24_ip_forward"></Option>
-          <Option name="linux24_log_martians"></Option>
-          <Option name="linux24_path_ip"></Option>
-          <Option name="linux24_path_iptables"></Option>
-          <Option name="linux24_path_logger"></Option>
-          <Option name="linux24_path_lsmod"></Option>
-          <Option name="linux24_path_modprobe"></Option>
-          <Option name="linux24_rp_filter"></Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_accept_redirects"/>
+          <Option name="linux24_accept_source_route"/>
+          <Option name="linux24_icmp_echo_ignore_all"/>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
+          <Option name="linux24_icmp_ignore_bogus_error_responses"/>
+          <Option name="linux24_ip_dynaddr"/>
+          <Option name="linux24_ip_forward"/>
+          <Option name="linux24_log_martians"/>
+          <Option name="linux24_path_ip"/>
+          <Option name="linux24_path_iptables"/>
+          <Option name="linux24_path_logger"/>
+          <Option name="linux24_path_lsmod"/>
+          <Option name="linux24_path_modprobe"/>
+          <Option name="linux24_rp_filter"/>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">30</Option>
           <Option name="linux24_tcp_keepalive_interval">1800</Option>
-          <Option name="linux24_tcp_sack"></Option>
-          <Option name="linux24_tcp_syncookies"></Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_sack"/>
+          <Option name="linux24_tcp_syncookies"/>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">False</Option>
           <Option name="local_nat">False</Option>
           <Option name="log_all">False</Option>
@@ -8151,26 +8454,26 @@
           <Option name="log_level">debug</Option>
           <Option name="log_limit_suffix">/second</Option>
           <Option name="log_limit_value">0</Option>
-          <Option name="log_prefix"></Option>
+          <Option name="log_prefix"/>
           <Option name="log_tcp_opt">False</Option>
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"></Option>
+          <Option name="mgmt_addr"/>
           <Option name="mgmt_ssh">False</Option>
           <Option name="no_iochains_for_any">False</Option>
           <Option name="no_optimisation">False</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="platform">iptables</Option>
           <Option name="prolog_place">after_interfaces</Option>
-          <Option name="prolog_script"></Option>
+          <Option name="prolog_script"/>
           <Option name="proxy_arp">False</Option>
-          <Option name="scpArgs"></Option>
-          <Option name="script_env_path"></Option>
-          <Option name="script_name_on_firewall"></Option>
-          <Option name="snmp_contact"></Option>
-          <Option name="snmp_description"></Option>
-          <Option name="snmp_location"></Option>
-          <Option name="sshArgs"></Option>
+          <Option name="scpArgs"/>
+          <Option name="script_env_path"/>
+          <Option name="script_name_on_firewall"/>
+          <Option name="snmp_contact"/>
+          <Option name="snmp_description"/>
+          <Option name="snmp_location"/>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -8202,8 +8505,11 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id3F3E9BB6" disabled="False" group="" position="1" action="Translate" comment="">
@@ -8226,8 +8532,11 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id3F3E9D62" disabled="False" group="" position="2" action="Translate" comment="">
@@ -8252,8 +8561,11 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id3D8F5820" disabled="False" group="" position="3" action="Translate" comment="">
@@ -8275,8 +8587,11 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id3D8F5A56" disabled="False" group="" position="4" action="Translate" comment="">
@@ -8298,8 +8613,11 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id48356E1314854" disabled="False" group="" position="5" action="Translate" comment="">
@@ -8321,8 +8639,11 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id3AFB66D6" disabled="False" group="" position="6" action="Translate" comment="">
@@ -8344,8 +8665,11 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id3DE47CAD" disabled="False" group="" position="7" action="Translate" comment="">
@@ -8367,8 +8691,11 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
               <Option name="ipt_nat_random">True</Option>
               <Option name="ipt_snat_random">True</Option>
               <Option name="ipt_use_snat_instead_of_masq">False</Option>
@@ -8394,6 +8721,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id42323X29127" disabled="False" group="" position="9" action="Translate" comment="">
@@ -8415,6 +8745,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id42340X29127" disabled="False" group="" position="10" action="Translate" comment="">
@@ -8436,6 +8769,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3D1519E8" disabled="False" group="" position="11" action="Translate" comment="">
@@ -8461,6 +8797,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3D151BA0" disabled="False" group="" position="12" action="Translate" comment="">
@@ -8484,6 +8823,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3AFB69BD" disabled="False" group="" position="13" action="Translate" comment="">
@@ -8509,6 +8851,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3E76DDFF" disabled="False" group="" position="14" action="Translate" comment="">
@@ -8532,6 +8877,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3E76DE15" disabled="False" group="" position="15" action="Translate" comment="">
@@ -8554,6 +8902,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3E76DF9A" disabled="False" group="" position="16" action="Translate" comment="">
@@ -8577,6 +8928,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3DEA75AF" disabled="True" group="" position="17" action="Translate" comment="">
@@ -8599,6 +8953,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3DE47C72" disabled="False" group="" position="18" action="Translate" comment="">
@@ -8621,6 +8978,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3BEEF6D2" disabled="False" group="" position="19" action="Translate" comment="">
@@ -8642,6 +9002,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3BD67563" disabled="False" group="" position="20" action="Translate" comment="">
@@ -8663,8 +9026,11 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id3BD6757E" disabled="False" group="" position="21" action="Translate" comment="">
@@ -8686,6 +9052,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id4368AD8715884" disabled="False" group="" position="22" action="Translate" comment="">
@@ -8707,6 +9076,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3B66568B" disabled="False" group="" position="23" action="Translate" comment="NETMAP ">
@@ -8728,6 +9100,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3B6656EF" disabled="False" group="" position="24" action="Translate" comment="NETMAP">
@@ -8749,6 +9124,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3AFB69F7" disabled="False" group="" position="25" action="Translate" comment="">
@@ -8770,6 +9148,9 @@
             <TSrv neg="False">
               <ServiceRef ref="id3B20468D"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id446BA34525148" disabled="False" group="" position="26" action="Translate" comment="">
@@ -8792,6 +9173,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3B7313C4" disabled="False" group="" position="27" action="Translate" comment="">
@@ -8813,6 +9197,9 @@
             <TSrv neg="False">
               <ServiceRef ref="tcp-SMTP"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3E04C979" disabled="False" group="" position="28" action="Translate" comment="">
@@ -8835,6 +9222,9 @@
             <TSrv neg="False">
               <ServiceRef ref="id3B4FF09A"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3E74F756" disabled="False" group="" position="29" action="Translate" comment="">
@@ -8856,6 +9246,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3E74F620" disabled="False" group="" position="30" action="Translate" comment="">
@@ -8881,6 +9274,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3FB3526D" disabled="False" group="" position="31" action="Translate" comment="transparent proxy rule">
@@ -8902,6 +9298,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id402335CD" disabled="True" group="" position="32" action="Translate" comment="">
@@ -8924,6 +9323,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3FC6531F" disabled="False" group="" position="33" action="Translate" comment="">
@@ -8945,6 +9347,9 @@
             <TSrv neg="False">
               <ServiceRef ref="id3DDDE4E4"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id40F2F9C1" disabled="False" group="" position="34" action="Translate" comment="">
@@ -8966,6 +9371,9 @@
             <TSrv neg="False">
               <ServiceRef ref="id3DDDE4E4"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id407EDDBD" disabled="False" group="" position="35" action="Translate" comment="">
@@ -8987,6 +9395,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id407EDE37" disabled="False" group="" position="36" action="Translate" comment="">
@@ -9008,6 +9419,9 @@
             <TSrv neg="False">
               <ServiceRef ref="id3B4FF09A"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id40F195C3" disabled="False" group="" position="37" action="Translate" comment="">
@@ -9029,6 +9443,9 @@
             <TSrv neg="False">
               <ServiceRef ref="id3B4FF09A"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id40F1C52F" disabled="False" group="" position="38" action="Translate" comment="">
@@ -9050,6 +9467,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id407EDCD5" disabled="False" group="" position="39" action="Translate" comment="">
@@ -9071,6 +9491,9 @@
             <TSrv neg="False">
               <ServiceRef ref="id3B4FF09A"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id46D6DA2024736" disabled="False" group="" position="40" action="Translate" comment="this is the &quot;exception&quot; rule&#10;used in support req. originally">
@@ -9092,6 +9515,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
               <Option name="color">#C08B5A</Option>
             </NATRuleOptions>
@@ -9115,6 +9541,9 @@
             <TSrv neg="False">
               <ServiceRef ref="id3B4FF09A"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
               <Option name="color">#C08B5A</Option>
             </NATRuleOptions>
@@ -9138,6 +9567,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
               <Option name="color">#8BC065</Option>
             </NATRuleOptions>
@@ -9161,6 +9593,9 @@
             <TSrv neg="False">
               <ServiceRef ref="id3B4FF09A"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
               <Option name="color">#8BC065</Option>
             </NATRuleOptions>
@@ -9184,6 +9619,9 @@
             <TSrv neg="False">
               <ServiceRef ref="id3B4FF09A"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
               <Option name="color">#8BC065</Option>
             </NATRuleOptions>
@@ -9207,6 +9645,9 @@
             <TSrv neg="False">
               <ServiceRef ref="id3B4FF09A"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
               <Option name="color">#8BC065</Option>
             </NATRuleOptions>
@@ -9230,6 +9671,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
               <Option name="color">#C0BA44</Option>
             </NATRuleOptions>
@@ -9253,6 +9697,9 @@
             <TSrv neg="False">
               <ServiceRef ref="id3B4FF09A"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
               <Option name="color">#C0BA44</Option>
             </NATRuleOptions>
@@ -9276,6 +9723,9 @@
             <TSrv neg="False">
               <ServiceRef ref="id69386X25753"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id1194991X6573" disabled="False" group="" position="49" action="Translate" comment="">
@@ -9297,6 +9747,9 @@
             <TSrv neg="False">
               <ServiceRef ref="id1195021X6573"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id58000X8289" disabled="False" group="" position="50" action="Translate" comment="">
@@ -9318,6 +9771,9 @@
             <TSrv neg="False">
               <ServiceRef ref="id1195021X6573"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id248774X9517" disabled="False" group="" position="51" action="Translate" comment="">
@@ -9339,6 +9795,9 @@
             <TSrv neg="False">
               <ServiceRef ref="id1195021X6573"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id439713X9517" disabled="False" group="" position="52" action="Translate" comment="">
@@ -9360,6 +9819,9 @@
             <TSrv neg="False">
               <ServiceRef ref="udp-DNS"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <RuleSetOptions/>
@@ -9383,8 +9845,8 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="action_on_reject"/>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="log_prefix">Iface: %I RULE %N -- %A **</Option>
               <Option name="stateless">True</Option>
@@ -9408,8 +9870,8 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="action_on_reject"/>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="log_prefix">Iface: %I RULE %N -- %A **</Option>
               <Option name="stateless">True</Option>
@@ -9432,20 +9894,20 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="connlimit_masklen">0</Option>
               <Option name="connlimit_value">0</Option>
               <Option name="firewall_is_part_of_any_and_networks">False</Option>
               <Option name="hashlimit_burst">0</Option>
               <Option name="hashlimit_dstlimit">False</Option>
               <Option name="hashlimit_mode">dstip</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -9468,20 +9930,20 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="connlimit_masklen">0</Option>
               <Option name="connlimit_value">0</Option>
               <Option name="firewall_is_part_of_any_and_networks">False</Option>
               <Option name="hashlimit_burst">0</Option>
               <Option name="hashlimit_dstlimit">False</Option>
               <Option name="hashlimit_mode">dstip</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -9580,7 +10042,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -9602,7 +10064,7 @@
             </When>
             <PolicyRuleOptions>
               <Option name="action_on_reject">TCP RST</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="log_prefix">IDENT</Option>
               <Option name="stateless">True</Option>
@@ -9627,9 +10089,9 @@
             <PolicyRuleOptions>
               <Option name="action_on_reject">TCP RST</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -9978,11 +10440,11 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="limit_burst">10</Option>
               <Option name="limit_suffix">/minute</Option>
               <Option name="limit_value">5</Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_prefix"/>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -10021,7 +10483,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -10061,53 +10523,53 @@
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">False</Option>
           <Option name="action_on_reject">ICMP net unreachable</Option>
-          <Option name="activationCmd"></Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="activationCmd"/>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">True</Option>
           <Option name="clamp_mss_to_mtu">True</Option>
           <Option name="classify_mark_terminating">False</Option>
           <Option name="cmdline">-xt</Option>
-          <Option name="compiler"></Option>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="drop_invalid">True</Option>
           <Option name="dyn_addr">False</Option>
-          <Option name="epilog_script"></Option>
-          <Option name="firewall_dir"></Option>
+          <Option name="epilog_script"/>
+          <Option name="firewall_dir"/>
           <Option name="firewall_is_part_of_any">True</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
-          <Option name="id"></Option>
+          <Option name="id"/>
           <Option name="ignore_empty_groups">False</Option>
-          <Option name="inst_cmdline"></Option>
-          <Option name="inst_script"></Option>
-          <Option name="install_script"></Option>
+          <Option name="inst_cmdline"/>
+          <Option name="inst_script"/>
+          <Option name="install_script"/>
           <Option name="ipv4_6_order">ipv4_first</Option>
           <Option name="limit_suffix">/second</Option>
           <Option name="limit_value">5</Option>
           <Option name="linux24_accept_redirects">0</Option>
           <Option name="linux24_accept_source_route">0</Option>
           <Option name="linux24_icmp_echo_ignore_all">1</Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
           <Option name="linux24_icmp_ignore_bogus_error_responses">1</Option>
-          <Option name="linux24_ip_dynaddr"></Option>
+          <Option name="linux24_ip_dynaddr"/>
           <Option name="linux24_ip_forward">1</Option>
           <Option name="linux24_log_martians">1</Option>
-          <Option name="linux24_path_ip"></Option>
-          <Option name="linux24_path_iptables"></Option>
-          <Option name="linux24_path_logger"></Option>
-          <Option name="linux24_path_lsmod"></Option>
-          <Option name="linux24_path_modprobe"></Option>
+          <Option name="linux24_path_ip"/>
+          <Option name="linux24_path_iptables"/>
+          <Option name="linux24_path_logger"/>
+          <Option name="linux24_path_lsmod"/>
+          <Option name="linux24_path_modprobe"/>
           <Option name="linux24_rp_filter">1</Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">30</Option>
           <Option name="linux24_tcp_keepalive_interval">1800</Option>
-          <Option name="linux24_tcp_sack"></Option>
-          <Option name="linux24_tcp_syncookies"></Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_sack"/>
+          <Option name="linux24_tcp_syncookies"/>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">False</Option>
           <Option name="local_nat">True</Option>
           <Option name="log_all">False</Option>
@@ -10121,22 +10583,22 @@
           <Option name="log_tcp_opt">False</Option>
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"></Option>
+          <Option name="mgmt_addr"/>
           <Option name="mgmt_ssh">False</Option>
           <Option name="no_iochains_for_any">False</Option>
           <Option name="no_ipv6_default_policy">False</Option>
           <Option name="no_optimisation">False</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="platform">iptables</Option>
           <Option name="prolog_place">after_flush</Option>
-          <Option name="prolog_script"></Option>
+          <Option name="prolog_script"/>
           <Option name="proxy_arp">True</Option>
-          <Option name="scpArgs"></Option>
-          <Option name="script_env_path"></Option>
-          <Option name="snmp_contact"></Option>
-          <Option name="snmp_description"></Option>
-          <Option name="snmp_location"></Option>
-          <Option name="sshArgs"></Option>
+          <Option name="scpArgs"/>
+          <Option name="script_env_path"/>
+          <Option name="snmp_contact"/>
+          <Option name="snmp_description"/>
+          <Option name="snmp_location"/>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -10169,8 +10631,11 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id3B0226C6" disabled="False" group="" position="1" action="Translate" comment="">
@@ -10192,8 +10657,11 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
             </NATRuleOptions>
           </NATRule>
           <RuleSetOptions/>
@@ -10254,20 +10722,20 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="connlimit_masklen">0</Option>
               <Option name="connlimit_value">0</Option>
               <Option name="firewall_is_part_of_any_and_networks">False</Option>
               <Option name="hashlimit_burst">0</Option>
               <Option name="hashlimit_dstlimit">False</Option>
               <Option name="hashlimit_mode">dstip</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -10290,20 +10758,20 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="connlimit_masklen">0</Option>
               <Option name="connlimit_value">0</Option>
               <Option name="firewall_is_part_of_any_and_networks">False</Option>
               <Option name="hashlimit_burst">0</Option>
               <Option name="hashlimit_dstlimit">False</Option>
               <Option name="hashlimit_mode">dstip</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -10478,7 +10946,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id3B022A81" disabled="False" group="" log="False" position="13" action="Accept" direction="Both" comment="">
@@ -10517,7 +10985,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -10595,7 +11063,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -10616,7 +11084,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id3B022700" disabled="False" group="" log="True" position="20" action="Deny" direction="Both" comment="'catch all' rule">
@@ -10636,7 +11104,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -10728,51 +11196,51 @@
           <Option name="accept_established">False</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
           <Option name="action_on_reject">ICMP net unreachable</Option>
-          <Option name="activationCmd"></Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="activationCmd"/>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">False</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
-          <Option name="cmdline"></Option>
-          <Option name="compiler"></Option>
+          <Option name="cmdline"/>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="drop_invalid">False</Option>
           <Option name="dyn_addr">False</Option>
-          <Option name="epilog_script"></Option>
-          <Option name="firewall_dir"></Option>
+          <Option name="epilog_script"/>
+          <Option name="firewall_dir"/>
           <Option name="firewall_is_part_of_any">False</Option>
           <Option name="firewall_is_part_of_any_and_networks">False</Option>
-          <Option name="id"></Option>
+          <Option name="id"/>
           <Option name="ignore_empty_groups">False</Option>
-          <Option name="inst_cmdline"></Option>
-          <Option name="inst_script"></Option>
-          <Option name="install_script"></Option>
-          <Option name="limit_suffix"></Option>
+          <Option name="inst_cmdline"/>
+          <Option name="inst_script"/>
+          <Option name="install_script"/>
+          <Option name="limit_suffix"/>
           <Option name="limit_value">0</Option>
-          <Option name="linux24_accept_redirects"></Option>
-          <Option name="linux24_accept_source_route"></Option>
-          <Option name="linux24_icmp_echo_ignore_all"></Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
-          <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
-          <Option name="linux24_ip_dynaddr"></Option>
-          <Option name="linux24_ip_forward"></Option>
-          <Option name="linux24_log_martians"></Option>
-          <Option name="linux24_path_ip"></Option>
-          <Option name="linux24_path_iptables"></Option>
-          <Option name="linux24_path_logger"></Option>
-          <Option name="linux24_path_lsmod"></Option>
-          <Option name="linux24_path_modprobe"></Option>
-          <Option name="linux24_rp_filter"></Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_accept_redirects"/>
+          <Option name="linux24_accept_source_route"/>
+          <Option name="linux24_icmp_echo_ignore_all"/>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
+          <Option name="linux24_icmp_ignore_bogus_error_responses"/>
+          <Option name="linux24_ip_dynaddr"/>
+          <Option name="linux24_ip_forward"/>
+          <Option name="linux24_log_martians"/>
+          <Option name="linux24_path_ip"/>
+          <Option name="linux24_path_iptables"/>
+          <Option name="linux24_path_logger"/>
+          <Option name="linux24_path_lsmod"/>
+          <Option name="linux24_path_modprobe"/>
+          <Option name="linux24_rp_filter"/>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">30</Option>
           <Option name="linux24_tcp_keepalive_interval">1800</Option>
-          <Option name="linux24_tcp_sack"></Option>
-          <Option name="linux24_tcp_syncookies"></Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_sack"/>
+          <Option name="linux24_tcp_syncookies"/>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">False</Option>
           <Option name="local_nat">False</Option>
           <Option name="log_all">False</Option>
@@ -10782,24 +11250,24 @@
           <Option name="log_level">debug</Option>
           <Option name="log_limit_suffix">/second</Option>
           <Option name="log_limit_value">0</Option>
-          <Option name="log_prefix"></Option>
+          <Option name="log_prefix"/>
           <Option name="log_tcp_opt">False</Option>
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">False</Option>
-          <Option name="mgmt_addr"></Option>
+          <Option name="mgmt_addr"/>
           <Option name="mgmt_ssh">False</Option>
           <Option name="no_iochains_for_any">True</Option>
           <Option name="no_optimisation">False</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="platform">iptables</Option>
           <Option name="prolog_place">top</Option>
-          <Option name="prolog_script"></Option>
+          <Option name="prolog_script"/>
           <Option name="proxy_arp">False</Option>
-          <Option name="script_env_path"></Option>
-          <Option name="snmp_contact"></Option>
-          <Option name="snmp_description"></Option>
-          <Option name="snmp_location"></Option>
-          <Option name="sshArgs"></Option>
+          <Option name="script_env_path"/>
+          <Option name="snmp_contact"/>
+          <Option name="snmp_description"/>
+          <Option name="snmp_location"/>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -10830,8 +11298,11 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id3DECF530" disabled="False" group="" position="1" action="Translate" comment="">
@@ -10853,6 +11324,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3DECF6DA" disabled="False" group="" position="2" action="Translate" comment="">
@@ -10874,6 +11348,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3B0C6390" disabled="False" group="" position="3" action="Translate" comment="">
@@ -10895,8 +11372,11 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id3DCA1BE7" disabled="False" group="" position="4" action="Translate" comment="">
@@ -10919,6 +11399,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3B202AFF" disabled="False" group="" position="5" action="Translate" comment="">
@@ -10940,6 +11423,9 @@
             <TSrv neg="False">
               <ServiceRef ref="tcp-SSH"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3E2529F3" disabled="False" group="" position="6" action="Translate" comment="">
@@ -10961,6 +11447,9 @@
             <TSrv neg="False">
               <ServiceRef ref="tcp-SSH"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <RuleSetOptions/>
@@ -11093,15 +11582,15 @@
               <Option name="hashlimit_gcinterval">0</Option>
               <Option name="hashlimit_max">0</Option>
               <Option name="hashlimit_mode">dstip</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -11133,15 +11622,15 @@
               <Option name="hashlimit_gcinterval">0</Option>
               <Option name="hashlimit_max">0</Option>
               <Option name="hashlimit_mode">dstip</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -11173,15 +11662,15 @@
               <Option name="hashlimit_gcinterval">0</Option>
               <Option name="hashlimit_max">0</Option>
               <Option name="hashlimit_mode">dstip</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -11213,15 +11702,15 @@
               <Option name="hashlimit_gcinterval">0</Option>
               <Option name="hashlimit_max">0</Option>
               <Option name="hashlimit_mode">dstip</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -11253,15 +11742,15 @@
               <Option name="hashlimit_gcinterval">0</Option>
               <Option name="hashlimit_max">0</Option>
               <Option name="hashlimit_mode">dstip</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -11293,15 +11782,15 @@
               <Option name="hashlimit_gcinterval">0</Option>
               <Option name="hashlimit_max">0</Option>
               <Option name="hashlimit_mode">dstip</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -11324,7 +11813,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -11346,7 +11835,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -11369,7 +11858,7 @@
               <IntervalRef ref="id3D6864D0"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -11446,7 +11935,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id3E20A8E1" disabled="False" group="" log="False" position="18" action="Accept" direction="Both" comment="">
@@ -11484,7 +11973,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -11522,52 +12011,52 @@
           <Option name="accept_established">False</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
           <Option name="action_on_reject">ICMP net unreachable</Option>
-          <Option name="activationCmd"></Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="activationCmd"/>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">False</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
           <Option name="classify_mark_terminating">False</Option>
-          <Option name="cmdline"></Option>
-          <Option name="compiler"></Option>
+          <Option name="cmdline"/>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="drop_invalid">False</Option>
           <Option name="dyn_addr">False</Option>
-          <Option name="epilog_script"></Option>
-          <Option name="firewall_dir"></Option>
+          <Option name="epilog_script"/>
+          <Option name="firewall_dir"/>
           <Option name="firewall_is_part_of_any">True</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
-          <Option name="id"></Option>
+          <Option name="id"/>
           <Option name="ignore_empty_groups">False</Option>
-          <Option name="inst_cmdline"></Option>
-          <Option name="inst_script"></Option>
-          <Option name="install_script"></Option>
+          <Option name="inst_cmdline"/>
+          <Option name="inst_script"/>
+          <Option name="install_script"/>
           <Option name="limit_suffix">/day</Option>
           <Option name="limit_value">0</Option>
-          <Option name="linux24_accept_redirects"></Option>
-          <Option name="linux24_accept_source_route"></Option>
-          <Option name="linux24_icmp_echo_ignore_all"></Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
-          <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
-          <Option name="linux24_ip_dynaddr"></Option>
-          <Option name="linux24_ip_forward"></Option>
-          <Option name="linux24_log_martians"></Option>
-          <Option name="linux24_path_ip"></Option>
-          <Option name="linux24_path_iptables"></Option>
-          <Option name="linux24_path_logger"></Option>
-          <Option name="linux24_path_lsmod"></Option>
-          <Option name="linux24_path_modprobe"></Option>
-          <Option name="linux24_rp_filter"></Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_accept_redirects"/>
+          <Option name="linux24_accept_source_route"/>
+          <Option name="linux24_icmp_echo_ignore_all"/>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
+          <Option name="linux24_icmp_ignore_bogus_error_responses"/>
+          <Option name="linux24_ip_dynaddr"/>
+          <Option name="linux24_ip_forward"/>
+          <Option name="linux24_log_martians"/>
+          <Option name="linux24_path_ip"/>
+          <Option name="linux24_path_iptables"/>
+          <Option name="linux24_path_logger"/>
+          <Option name="linux24_path_lsmod"/>
+          <Option name="linux24_path_modprobe"/>
+          <Option name="linux24_rp_filter"/>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">30</Option>
           <Option name="linux24_tcp_keepalive_interval">1800</Option>
-          <Option name="linux24_tcp_sack"></Option>
-          <Option name="linux24_tcp_syncookies"></Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_sack"/>
+          <Option name="linux24_tcp_syncookies"/>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">False</Option>
           <Option name="local_nat">False</Option>
           <Option name="log_all">False</Option>
@@ -11577,25 +12066,25 @@
           <Option name="log_level">debug</Option>
           <Option name="log_limit_suffix">/second</Option>
           <Option name="log_limit_value">0</Option>
-          <Option name="log_prefix"></Option>
+          <Option name="log_prefix"/>
           <Option name="log_tcp_opt">False</Option>
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"></Option>
+          <Option name="mgmt_addr"/>
           <Option name="mgmt_ssh">False</Option>
           <Option name="no_iochains_for_any">False</Option>
           <Option name="no_ipv6_default_policy">False</Option>
           <Option name="no_optimisation">False</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="platform">iptables</Option>
           <Option name="prolog_place">top</Option>
-          <Option name="prolog_script"></Option>
+          <Option name="prolog_script"/>
           <Option name="proxy_arp">False</Option>
-          <Option name="script_env_path"></Option>
-          <Option name="snmp_contact"></Option>
-          <Option name="snmp_description"></Option>
-          <Option name="snmp_location"></Option>
-          <Option name="sshArgs"></Option>
+          <Option name="script_env_path"/>
+          <Option name="snmp_contact"/>
+          <Option name="snmp_description"/>
+          <Option name="snmp_location"/>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">64</Option>
           <Option name="ulog_nlgroup">7</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -11626,6 +12115,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3E8F5A17" disabled="False" group="" position="1" action="Translate" comment="">
@@ -11647,6 +12139,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id47CC86147550" disabled="False" group="" position="2" action="Translate" comment="">
@@ -11668,6 +12163,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3CF5B9DB" disabled="False" group="" position="3" action="Translate" comment="">
@@ -11689,6 +12187,9 @@
             <TSrv neg="False">
               <ServiceRef ref="tcp-SSH"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <RuleSetOptions/>
@@ -11815,7 +12316,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id3E4A0454" disabled="False" group="" log="False" position="6" action="Accept" direction="Both" comment="">
@@ -12001,11 +12502,11 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
-              <Option name="id"></Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="action_on_reject"/>
+              <Option name="id"/>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -12047,59 +12548,59 @@
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">False</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
-          <Option name="cmdline"></Option>
-          <Option name="compiler"></Option>
+          <Option name="cmdline"/>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">False</Option>
           <Option name="debug">False</Option>
           <Option name="dyn_addr">False</Option>
           <Option name="firewall_is_part_of_any">True</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
-          <Option name="id"></Option>
+          <Option name="id"/>
           <Option name="ignore_empty_groups">False</Option>
-          <Option name="install_script"></Option>
+          <Option name="install_script"/>
           <Option name="limit_suffix">/day</Option>
           <Option name="limit_value">0</Option>
-          <Option name="linux24_accept_redirects"></Option>
-          <Option name="linux24_accept_source_route"></Option>
-          <Option name="linux24_icmp_echo_ignore_all"></Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
-          <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
-          <Option name="linux24_ip_dynaddr"></Option>
-          <Option name="linux24_ip_forward"></Option>
-          <Option name="linux24_log_martians"></Option>
-          <Option name="linux24_path_ip"></Option>
-          <Option name="linux24_path_iptables"></Option>
-          <Option name="linux24_path_logger"></Option>
-          <Option name="linux24_path_lsmod"></Option>
-          <Option name="linux24_path_modprobe"></Option>
-          <Option name="linux24_rp_filter"></Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_accept_redirects"/>
+          <Option name="linux24_accept_source_route"/>
+          <Option name="linux24_icmp_echo_ignore_all"/>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
+          <Option name="linux24_icmp_ignore_bogus_error_responses"/>
+          <Option name="linux24_ip_dynaddr"/>
+          <Option name="linux24_ip_forward"/>
+          <Option name="linux24_log_martians"/>
+          <Option name="linux24_path_ip"/>
+          <Option name="linux24_path_iptables"/>
+          <Option name="linux24_path_logger"/>
+          <Option name="linux24_path_lsmod"/>
+          <Option name="linux24_path_modprobe"/>
+          <Option name="linux24_rp_filter"/>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">30</Option>
           <Option name="linux24_tcp_keepalive_interval">1800</Option>
-          <Option name="linux24_tcp_sack"></Option>
-          <Option name="linux24_tcp_syncookies"></Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_sack"/>
+          <Option name="linux24_tcp_syncookies"/>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">False</Option>
           <Option name="local_nat">False</Option>
           <Option name="log_all">False</Option>
           <Option name="log_all_dropped">False</Option>
           <Option name="log_ip_opt">False</Option>
-          <Option name="log_level"></Option>
-          <Option name="log_limit_suffix"></Option>
+          <Option name="log_level"/>
+          <Option name="log_limit_suffix"/>
           <Option name="log_limit_value">0</Option>
-          <Option name="log_prefix"></Option>
+          <Option name="log_prefix"/>
           <Option name="log_tcp_opt">False</Option>
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">False</Option>
           <Option name="no_iochains_for_any">False</Option>
           <Option name="no_optimisation">False</Option>
           <Option name="platform">iptables</Option>
-          <Option name="script_env_path"></Option>
-          <Option name="snmp_contact"></Option>
-          <Option name="snmp_description"></Option>
-          <Option name="snmp_location"></Option>
+          <Option name="script_env_path"/>
+          <Option name="snmp_contact"/>
+          <Option name="snmp_description"/>
+          <Option name="snmp_location"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -12283,11 +12784,11 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="limit_burst">50</Option>
               <Option name="limit_suffix">/minute</Option>
               <Option name="limit_value">10</Option>
-              <Option name="log_level"></Option>
+              <Option name="log_level"/>
               <Option name="log_prefix">CATCH ALL RULE</Option>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
@@ -12318,60 +12819,60 @@
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">False</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
-          <Option name="cmdline"></Option>
-          <Option name="compiler"></Option>
+          <Option name="cmdline"/>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">False</Option>
           <Option name="debug">False</Option>
           <Option name="dyn_addr">False</Option>
           <Option name="firewall_is_part_of_any">True</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="ignore_empty_groups">False</Option>
-          <Option name="inst_cmdline"></Option>
-          <Option name="inst_script"></Option>
-          <Option name="install_script"></Option>
+          <Option name="inst_cmdline"/>
+          <Option name="inst_script"/>
+          <Option name="install_script"/>
           <Option name="limit_suffix">/day</Option>
           <Option name="limit_value">0</Option>
-          <Option name="linux24_accept_redirects"></Option>
-          <Option name="linux24_accept_source_route"></Option>
-          <Option name="linux24_icmp_echo_ignore_all"></Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
-          <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
-          <Option name="linux24_ip_dynaddr"></Option>
+          <Option name="linux24_accept_redirects"/>
+          <Option name="linux24_accept_source_route"/>
+          <Option name="linux24_icmp_echo_ignore_all"/>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
+          <Option name="linux24_icmp_ignore_bogus_error_responses"/>
+          <Option name="linux24_ip_dynaddr"/>
           <Option name="linux24_ip_forward">0</Option>
-          <Option name="linux24_log_martians"></Option>
-          <Option name="linux24_path_ip"></Option>
-          <Option name="linux24_path_iptables"></Option>
-          <Option name="linux24_path_logger"></Option>
-          <Option name="linux24_path_lsmod"></Option>
-          <Option name="linux24_path_modprobe"></Option>
-          <Option name="linux24_rp_filter"></Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_log_martians"/>
+          <Option name="linux24_path_ip"/>
+          <Option name="linux24_path_iptables"/>
+          <Option name="linux24_path_logger"/>
+          <Option name="linux24_path_lsmod"/>
+          <Option name="linux24_path_modprobe"/>
+          <Option name="linux24_rp_filter"/>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">30</Option>
           <Option name="linux24_tcp_keepalive_interval">1800</Option>
-          <Option name="linux24_tcp_sack"></Option>
-          <Option name="linux24_tcp_syncookies"></Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_sack"/>
+          <Option name="linux24_tcp_syncookies"/>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">True</Option>
           <Option name="local_nat">False</Option>
           <Option name="log_all">False</Option>
           <Option name="log_all_dropped">False</Option>
           <Option name="log_ip_opt">False</Option>
           <Option name="log_level">debug</Option>
-          <Option name="log_limit_suffix"></Option>
+          <Option name="log_limit_suffix"/>
           <Option name="log_limit_value">0</Option>
-          <Option name="log_prefix"></Option>
+          <Option name="log_prefix"/>
           <Option name="log_tcp_opt">False</Option>
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">False</Option>
           <Option name="no_iochains_for_any">False</Option>
           <Option name="no_optimisation">False</Option>
           <Option name="platform">iptables</Option>
-          <Option name="script_env_path"></Option>
-          <Option name="snmp_contact"></Option>
-          <Option name="snmp_description"></Option>
-          <Option name="snmp_location"></Option>
+          <Option name="script_env_path"/>
+          <Option name="snmp_contact"/>
+          <Option name="snmp_description"/>
+          <Option name="snmp_location"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -12402,6 +12903,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3D5C25B0" disabled="False" group="" position="1" action="Translate" comment="">
@@ -12423,6 +12927,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3E7949B6" disabled="False" group="" position="2" action="Translate" comment="this is SDNAT rule, it translates&#10;both source and destination&#10;this rule should be equivalent to two rules above">
@@ -12444,6 +12951,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3E7951E3" disabled="False" group="" position="3" action="Translate" comment="">
@@ -12466,6 +12976,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3E7952DB" disabled="False" group="" position="4" action="Translate" comment="">
@@ -12488,6 +13001,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3E795311" disabled="False" group="" position="5" action="Translate" comment="">
@@ -12510,6 +13026,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3E9BC4A7" disabled="False" group="" position="6" action="Translate" comment="">
@@ -12531,6 +13050,9 @@
             <TSrv neg="False">
               <ServiceRef ref="id3B4FF09A"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3F9F8382" disabled="False" group="" position="7" action="Translate" comment="">
@@ -12552,6 +13074,9 @@
             <TSrv neg="False">
               <ServiceRef ref="id3B4FF09A"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3E79538A" disabled="False" group="" position="8" action="Translate" comment="">
@@ -12573,6 +13098,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3E79539A" disabled="False" group="" position="9" action="Translate" comment="">
@@ -12594,6 +13122,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <RuleSetOptions/>
@@ -12732,41 +13263,41 @@
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">True</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
-          <Option name="cmdline"></Option>
-          <Option name="compiler"></Option>
+          <Option name="cmdline"/>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="dyn_addr">False</Option>
           <Option name="firewall_is_part_of_any">True</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="ignore_empty_groups">False</Option>
-          <Option name="inst_cmdline"></Option>
-          <Option name="inst_script"></Option>
-          <Option name="install_script"></Option>
+          <Option name="inst_cmdline"/>
+          <Option name="inst_script"/>
+          <Option name="install_script"/>
           <Option name="limit_suffix">/day</Option>
           <Option name="limit_value">0</Option>
-          <Option name="linux24_accept_redirects"></Option>
-          <Option name="linux24_accept_source_route"></Option>
-          <Option name="linux24_icmp_echo_ignore_all"></Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
-          <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
-          <Option name="linux24_ip_dynaddr"></Option>
-          <Option name="linux24_ip_forward"></Option>
-          <Option name="linux24_log_martians"></Option>
-          <Option name="linux24_path_ip"></Option>
-          <Option name="linux24_path_iptables"></Option>
-          <Option name="linux24_path_logger"></Option>
-          <Option name="linux24_path_lsmod"></Option>
-          <Option name="linux24_path_modprobe"></Option>
-          <Option name="linux24_rp_filter"></Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_accept_redirects"/>
+          <Option name="linux24_accept_source_route"/>
+          <Option name="linux24_icmp_echo_ignore_all"/>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
+          <Option name="linux24_icmp_ignore_bogus_error_responses"/>
+          <Option name="linux24_ip_dynaddr"/>
+          <Option name="linux24_ip_forward"/>
+          <Option name="linux24_log_martians"/>
+          <Option name="linux24_path_ip"/>
+          <Option name="linux24_path_iptables"/>
+          <Option name="linux24_path_logger"/>
+          <Option name="linux24_path_lsmod"/>
+          <Option name="linux24_path_modprobe"/>
+          <Option name="linux24_rp_filter"/>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">30</Option>
           <Option name="linux24_tcp_keepalive_interval">1800</Option>
-          <Option name="linux24_tcp_sack"></Option>
-          <Option name="linux24_tcp_syncookies"></Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_sack"/>
+          <Option name="linux24_tcp_syncookies"/>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">False</Option>
           <Option name="local_nat">False</Option>
           <Option name="log_all">False</Option>
@@ -12783,10 +13314,10 @@
           <Option name="no_optimisation">False</Option>
           <Option name="platform">iptables</Option>
           <Option name="proxy_arp">False</Option>
-          <Option name="script_env_path"></Option>
-          <Option name="snmp_contact"></Option>
-          <Option name="snmp_description"></Option>
-          <Option name="snmp_location"></Option>
+          <Option name="script_env_path"/>
+          <Option name="snmp_contact"/>
+          <Option name="snmp_description"/>
+          <Option name="snmp_location"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -12817,6 +13348,9 @@
             <TSrv neg="False">
               <ServiceRef ref="id3B5009F7"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <RuleSetOptions/>
@@ -13151,41 +13685,41 @@
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">False</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
-          <Option name="cmdline"></Option>
-          <Option name="compiler"></Option>
+          <Option name="cmdline"/>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="dyn_addr">False</Option>
           <Option name="firewall_is_part_of_any">True</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="ignore_empty_groups">False</Option>
-          <Option name="inst_cmdline"></Option>
-          <Option name="inst_script"></Option>
-          <Option name="install_script"></Option>
+          <Option name="inst_cmdline"/>
+          <Option name="inst_script"/>
+          <Option name="install_script"/>
           <Option name="limit_suffix">/day</Option>
           <Option name="limit_value">0</Option>
-          <Option name="linux24_accept_redirects"></Option>
-          <Option name="linux24_accept_source_route"></Option>
-          <Option name="linux24_icmp_echo_ignore_all"></Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
-          <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
-          <Option name="linux24_ip_dynaddr"></Option>
-          <Option name="linux24_ip_forward"></Option>
-          <Option name="linux24_log_martians"></Option>
-          <Option name="linux24_path_ip"></Option>
-          <Option name="linux24_path_iptables"></Option>
-          <Option name="linux24_path_logger"></Option>
-          <Option name="linux24_path_lsmod"></Option>
-          <Option name="linux24_path_modprobe"></Option>
-          <Option name="linux24_rp_filter"></Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_accept_redirects"/>
+          <Option name="linux24_accept_source_route"/>
+          <Option name="linux24_icmp_echo_ignore_all"/>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
+          <Option name="linux24_icmp_ignore_bogus_error_responses"/>
+          <Option name="linux24_ip_dynaddr"/>
+          <Option name="linux24_ip_forward"/>
+          <Option name="linux24_log_martians"/>
+          <Option name="linux24_path_ip"/>
+          <Option name="linux24_path_iptables"/>
+          <Option name="linux24_path_logger"/>
+          <Option name="linux24_path_lsmod"/>
+          <Option name="linux24_path_modprobe"/>
+          <Option name="linux24_rp_filter"/>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">30</Option>
           <Option name="linux24_tcp_keepalive_interval">1800</Option>
-          <Option name="linux24_tcp_sack"></Option>
-          <Option name="linux24_tcp_syncookies"></Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_sack"/>
+          <Option name="linux24_tcp_syncookies"/>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">False</Option>
           <Option name="local_nat">False</Option>
           <Option name="log_all">False</Option>
@@ -13194,7 +13728,7 @@
           <Option name="log_level">debug</Option>
           <Option name="log_limit_suffix">/second</Option>
           <Option name="log_limit_value">0</Option>
-          <Option name="log_prefix"></Option>
+          <Option name="log_prefix"/>
           <Option name="log_tcp_opt">False</Option>
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">True</Option>
@@ -13202,10 +13736,10 @@
           <Option name="no_optimisation">False</Option>
           <Option name="platform">iptables</Option>
           <Option name="proxy_arp">False</Option>
-          <Option name="script_env_path"></Option>
-          <Option name="snmp_contact"></Option>
-          <Option name="snmp_description"></Option>
-          <Option name="snmp_location"></Option>
+          <Option name="script_env_path"/>
+          <Option name="snmp_contact"/>
+          <Option name="snmp_description"/>
+          <Option name="snmp_location"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -13252,8 +13786,8 @@
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">True</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
-          <Option name="cmdline"></Option>
-          <Option name="compiler"></Option>
+          <Option name="cmdline"/>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="dyn_addr">False</Option>
@@ -13261,28 +13795,28 @@
           <Option name="ignore_empty_groups">False</Option>
           <Option name="limit_suffix">/day</Option>
           <Option name="limit_value">0</Option>
-          <Option name="linux24_accept_redirects"></Option>
-          <Option name="linux24_accept_source_route"></Option>
-          <Option name="linux24_icmp_echo_ignore_all"></Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
-          <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
-          <Option name="linux24_ip_dynaddr"></Option>
-          <Option name="linux24_ip_forward"></Option>
-          <Option name="linux24_log_martians"></Option>
-          <Option name="linux24_path_ip"></Option>
-          <Option name="linux24_path_iptables"></Option>
-          <Option name="linux24_path_logger"></Option>
-          <Option name="linux24_path_lsmod"></Option>
-          <Option name="linux24_path_modprobe"></Option>
-          <Option name="linux24_rp_filter"></Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_accept_redirects"/>
+          <Option name="linux24_accept_source_route"/>
+          <Option name="linux24_icmp_echo_ignore_all"/>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
+          <Option name="linux24_icmp_ignore_bogus_error_responses"/>
+          <Option name="linux24_ip_dynaddr"/>
+          <Option name="linux24_ip_forward"/>
+          <Option name="linux24_log_martians"/>
+          <Option name="linux24_path_ip"/>
+          <Option name="linux24_path_iptables"/>
+          <Option name="linux24_path_logger"/>
+          <Option name="linux24_path_lsmod"/>
+          <Option name="linux24_path_modprobe"/>
+          <Option name="linux24_rp_filter"/>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">30</Option>
           <Option name="linux24_tcp_keepalive_interval">1800</Option>
-          <Option name="linux24_tcp_sack"></Option>
-          <Option name="linux24_tcp_syncookies"></Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_sack"/>
+          <Option name="linux24_tcp_syncookies"/>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">True</Option>
           <Option name="local_nat">False</Option>
           <Option name="log_all">False</Option>
@@ -13294,10 +13828,10 @@
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">True</Option>
           <Option name="no_optimisation">False</Option>
-          <Option name="script_env_path"></Option>
-          <Option name="snmp_contact"></Option>
-          <Option name="snmp_description"></Option>
-          <Option name="snmp_location"></Option>
+          <Option name="script_env_path"/>
+          <Option name="snmp_contact"/>
+          <Option name="snmp_description"/>
+          <Option name="snmp_location"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -13330,9 +13864,9 @@
             <PolicyRuleOptions>
               <Option name="action_on_reject">TCP RST</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -13355,9 +13889,9 @@
             <PolicyRuleOptions>
               <Option name="action_on_reject">TCP RST</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -13380,9 +13914,9 @@
             <PolicyRuleOptions>
               <Option name="action_on_reject">TCP RST</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -13405,9 +13939,9 @@
             <PolicyRuleOptions>
               <Option name="action_on_reject">TCP RST</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -13430,9 +13964,9 @@
             <PolicyRuleOptions>
               <Option name="action_on_reject">TCP RST</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -13455,9 +13989,9 @@
             <PolicyRuleOptions>
               <Option name="action_on_reject">TCP RST</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -13480,9 +14014,9 @@
             <PolicyRuleOptions>
               <Option name="action_on_reject">TCP RST</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -13505,9 +14039,9 @@
             <PolicyRuleOptions>
               <Option name="action_on_reject">TCP RST</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -13531,10 +14065,10 @@
               <Option name="action_on_reject">TCP RST</Option>
               <Option name="firewall_is_part_of_any_and_networks">False</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -13560,10 +14094,10 @@
               <Option name="action_on_reject">TCP RST</Option>
               <Option name="firewall_is_part_of_any_and_networks">False</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -13590,10 +14124,10 @@
               <Option name="action_on_reject">TCP RST</Option>
               <Option name="firewall_is_part_of_any_and_networks">False</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -13620,10 +14154,10 @@
               <Option name="action_on_reject">TCP RST</Option>
               <Option name="firewall_is_part_of_any_and_networks">False</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -13646,32 +14180,32 @@
             </When>
             <PolicyRuleOptions>
               <Option name="action_on_reject">TCP RST</Option>
-              <Option name="classify_str"></Option>
-              <Option name="custom_str"></Option>
+              <Option name="classify_str"/>
+              <Option name="custom_str"/>
               <Option name="firewall_is_part_of_any_and_networks">False</Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -13695,32 +14229,32 @@
             </When>
             <PolicyRuleOptions>
               <Option name="action_on_reject">TCP RST</Option>
-              <Option name="classify_str"></Option>
-              <Option name="custom_str"></Option>
+              <Option name="classify_str"/>
+              <Option name="custom_str"/>
               <Option name="firewall_is_part_of_any_and_networks">False</Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -13745,32 +14279,32 @@
             </When>
             <PolicyRuleOptions>
               <Option name="action_on_reject">TCP RST</Option>
-              <Option name="classify_str"></Option>
-              <Option name="custom_str"></Option>
+              <Option name="classify_str"/>
+              <Option name="custom_str"/>
               <Option name="firewall_is_part_of_any_and_networks">False</Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -13804,41 +14338,41 @@
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">False</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
-          <Option name="cmdline"></Option>
-          <Option name="compiler"></Option>
+          <Option name="cmdline"/>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="dyn_addr">False</Option>
           <Option name="firewall_is_part_of_any">True</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="ignore_empty_groups">False</Option>
-          <Option name="inst_cmdline"></Option>
-          <Option name="inst_script"></Option>
-          <Option name="install_script"></Option>
+          <Option name="inst_cmdline"/>
+          <Option name="inst_script"/>
+          <Option name="install_script"/>
           <Option name="limit_suffix">/day</Option>
           <Option name="limit_value">0</Option>
-          <Option name="linux24_accept_redirects"></Option>
-          <Option name="linux24_accept_source_route"></Option>
-          <Option name="linux24_icmp_echo_ignore_all"></Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
-          <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
-          <Option name="linux24_ip_dynaddr"></Option>
-          <Option name="linux24_ip_forward"></Option>
-          <Option name="linux24_log_martians"></Option>
-          <Option name="linux24_path_ip"></Option>
-          <Option name="linux24_path_iptables"></Option>
-          <Option name="linux24_path_logger"></Option>
-          <Option name="linux24_path_lsmod"></Option>
-          <Option name="linux24_path_modprobe"></Option>
-          <Option name="linux24_rp_filter"></Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_accept_redirects"/>
+          <Option name="linux24_accept_source_route"/>
+          <Option name="linux24_icmp_echo_ignore_all"/>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
+          <Option name="linux24_icmp_ignore_bogus_error_responses"/>
+          <Option name="linux24_ip_dynaddr"/>
+          <Option name="linux24_ip_forward"/>
+          <Option name="linux24_log_martians"/>
+          <Option name="linux24_path_ip"/>
+          <Option name="linux24_path_iptables"/>
+          <Option name="linux24_path_logger"/>
+          <Option name="linux24_path_lsmod"/>
+          <Option name="linux24_path_modprobe"/>
+          <Option name="linux24_rp_filter"/>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">30</Option>
           <Option name="linux24_tcp_keepalive_interval">1800</Option>
-          <Option name="linux24_tcp_sack"></Option>
-          <Option name="linux24_tcp_syncookies"></Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_sack"/>
+          <Option name="linux24_tcp_syncookies"/>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">False</Option>
           <Option name="local_nat">False</Option>
           <Option name="log_all">False</Option>
@@ -13856,9 +14390,9 @@
           <Option name="platform">iptables</Option>
           <Option name="proxy_arp">False</Option>
           <Option name="script_env_path">/bin:/usr/bin:/sbin:/usr/sbin</Option>
-          <Option name="snmp_contact"></Option>
-          <Option name="snmp_description"></Option>
-          <Option name="snmp_location"></Option>
+          <Option name="snmp_contact"/>
+          <Option name="snmp_description"/>
+          <Option name="snmp_location"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -13892,10 +14426,10 @@
             <PolicyRuleOptions>
               <Option name="action_on_reject">ICMP admin prohibited</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -13917,11 +14451,11 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -13942,11 +14476,11 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -13967,11 +14501,11 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -13992,11 +14526,11 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -14017,11 +14551,11 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -14042,11 +14576,11 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -14067,11 +14601,11 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -14101,53 +14635,53 @@
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
           <Option name="action_on_reject">ICMP host unreachable</Option>
-          <Option name="activationCmd"></Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="activationCmd"/>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">False</Option>
           <Option name="clamp_mss_to_mtu">True</Option>
           <Option name="classify_mark_terminating">False</Option>
-          <Option name="cmdline"></Option>
-          <Option name="compiler"></Option>
+          <Option name="cmdline"/>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="drop_invalid">False</Option>
           <Option name="dyn_addr">False</Option>
           <Option name="enable_ipv6">False</Option>
-          <Option name="epilog_script"></Option>
-          <Option name="firewall_dir"></Option>
+          <Option name="epilog_script"/>
+          <Option name="firewall_dir"/>
           <Option name="firewall_is_part_of_any">True</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="ignore_empty_groups">False</Option>
-          <Option name="inst_cmdline"></Option>
-          <Option name="inst_script"></Option>
-          <Option name="install_script"></Option>
+          <Option name="inst_cmdline"/>
+          <Option name="inst_script"/>
+          <Option name="install_script"/>
           <Option name="ipv4_6_order">ipv4_first</Option>
           <Option name="limit_suffix">/day</Option>
           <Option name="limit_value">0</Option>
-          <Option name="linux24_accept_redirects"></Option>
-          <Option name="linux24_accept_source_route"></Option>
-          <Option name="linux24_icmp_echo_ignore_all"></Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
-          <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
-          <Option name="linux24_ip_dynaddr"></Option>
-          <Option name="linux24_ip_forward"></Option>
-          <Option name="linux24_log_martians"></Option>
-          <Option name="linux24_path_ip"></Option>
-          <Option name="linux24_path_iptables"></Option>
-          <Option name="linux24_path_logger"></Option>
-          <Option name="linux24_path_lsmod"></Option>
-          <Option name="linux24_path_modprobe"></Option>
-          <Option name="linux24_rp_filter"></Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_accept_redirects"/>
+          <Option name="linux24_accept_source_route"/>
+          <Option name="linux24_icmp_echo_ignore_all"/>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
+          <Option name="linux24_icmp_ignore_bogus_error_responses"/>
+          <Option name="linux24_ip_dynaddr"/>
+          <Option name="linux24_ip_forward"/>
+          <Option name="linux24_log_martians"/>
+          <Option name="linux24_path_ip"/>
+          <Option name="linux24_path_iptables"/>
+          <Option name="linux24_path_logger"/>
+          <Option name="linux24_path_lsmod"/>
+          <Option name="linux24_path_modprobe"/>
+          <Option name="linux24_rp_filter"/>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">30</Option>
           <Option name="linux24_tcp_keepalive_interval">1800</Option>
-          <Option name="linux24_tcp_sack"></Option>
-          <Option name="linux24_tcp_syncookies"></Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_sack"/>
+          <Option name="linux24_tcp_syncookies"/>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">False</Option>
           <Option name="local_nat">False</Option>
           <Option name="log_all">False</Option>
@@ -14157,25 +14691,25 @@
           <Option name="log_level">debug</Option>
           <Option name="log_limit_suffix">/second</Option>
           <Option name="log_limit_value">0</Option>
-          <Option name="log_prefix"></Option>
+          <Option name="log_prefix"/>
           <Option name="log_tcp_opt">False</Option>
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"></Option>
+          <Option name="mgmt_addr"/>
           <Option name="mgmt_ssh">False</Option>
           <Option name="no_iochains_for_any">False</Option>
           <Option name="no_ipv6_default_policy">False</Option>
           <Option name="no_optimisation">False</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="platform">iptables</Option>
           <Option name="prolog_place">top</Option>
-          <Option name="prolog_script"></Option>
+          <Option name="prolog_script"/>
           <Option name="proxy_arp">False</Option>
           <Option name="script_env_path">/bin:/usr/bin:/sbin:/usr/sbin</Option>
-          <Option name="snmp_contact"></Option>
-          <Option name="snmp_description"></Option>
-          <Option name="snmp_location"></Option>
-          <Option name="sshArgs"></Option>
+          <Option name="snmp_contact"/>
+          <Option name="snmp_description"/>
+          <Option name="snmp_location"/>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -14207,6 +14741,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3E854D14" disabled="False" group="" position="1" action="Translate" comment="">
@@ -14228,6 +14765,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id57837X26254" disabled="False" group="" position="2" action="Translate" comment="see bug #1693 , SF bug 3048516&#10;combination of using SNAT instead of MASQ,&#10;source port translation and dynamic interface">
@@ -14249,6 +14789,9 @@
             <TSrv neg="False">
               <ServiceRef ref="id3CE719F5"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
               <Option name="ipt_nat_persistent">False</Option>
               <Option name="ipt_nat_random">False</Option>
@@ -14274,6 +14817,9 @@
             <TSrv neg="False">
               <ServiceRef ref="id3B4FF09A"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <RuleSetOptions/>
@@ -14485,14 +15031,14 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
-              <Option name="color"></Option>
+              <Option name="action_on_reject"/>
+              <Option name="color"/>
               <Option name="firewall_is_part_of_any_and_networks">True</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -14754,13 +15300,13 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="firewall_is_part_of_any_and_networks">True</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -14799,18 +15345,18 @@
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
           <Option name="action_on_reject">ICMP net unreachable</Option>
-          <Option name="activationCmd"></Option>
+          <Option name="activationCmd"/>
           <Option name="add_mgmt_ssh_rule_when_stoped">False</Option>
           <Option name="add_rules_for_ipv6_neighbor_discovery">False</Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">True</Option>
           <Option name="check_shading">False</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
           <Option name="classify_mark_terminating">False</Option>
           <Option name="clear_unknown_interfaces">False</Option>
-          <Option name="cmdline"></Option>
-          <Option name="compiler"></Option>
+          <Option name="cmdline"/>
+          <Option name="compiler"/>
           <Option name="configure_bonding_interfaces">False</Option>
           <Option name="configure_bridge_interfaces">False</Option>
           <Option name="configure_interfaces">True</Option>
@@ -14818,39 +15364,39 @@
           <Option name="debug">False</Option>
           <Option name="drop_invalid">False</Option>
           <Option name="dyn_addr">False</Option>
-          <Option name="epilog_script"></Option>
-          <Option name="firewall_dir"></Option>
+          <Option name="epilog_script"/>
+          <Option name="firewall_dir"/>
           <Option name="firewall_is_part_of_any">True</Option>
           <Option name="firewall_is_part_of_any_and_networks">False</Option>
           <Option name="ignore_empty_groups">False</Option>
-          <Option name="inst_cmdline"></Option>
-          <Option name="inst_script"></Option>
-          <Option name="install_script"></Option>
+          <Option name="inst_cmdline"/>
+          <Option name="inst_script"/>
+          <Option name="install_script"/>
           <Option name="ipv4_6_order">ipv4_first</Option>
           <Option name="limit_suffix">/day</Option>
           <Option name="limit_value">0</Option>
-          <Option name="linux24_accept_redirects"></Option>
-          <Option name="linux24_accept_source_route"></Option>
-          <Option name="linux24_icmp_echo_ignore_all"></Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
-          <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
-          <Option name="linux24_ip_dynaddr"></Option>
-          <Option name="linux24_ip_forward"></Option>
-          <Option name="linux24_log_martians"></Option>
-          <Option name="linux24_path_ip"></Option>
-          <Option name="linux24_path_iptables"></Option>
-          <Option name="linux24_path_logger"></Option>
-          <Option name="linux24_path_lsmod"></Option>
-          <Option name="linux24_path_modprobe"></Option>
-          <Option name="linux24_rp_filter"></Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_accept_redirects"/>
+          <Option name="linux24_accept_source_route"/>
+          <Option name="linux24_icmp_echo_ignore_all"/>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
+          <Option name="linux24_icmp_ignore_bogus_error_responses"/>
+          <Option name="linux24_ip_dynaddr"/>
+          <Option name="linux24_ip_forward"/>
+          <Option name="linux24_log_martians"/>
+          <Option name="linux24_path_ip"/>
+          <Option name="linux24_path_iptables"/>
+          <Option name="linux24_path_logger"/>
+          <Option name="linux24_path_lsmod"/>
+          <Option name="linux24_path_modprobe"/>
+          <Option name="linux24_rp_filter"/>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">30</Option>
           <Option name="linux24_tcp_keepalive_interval">1800</Option>
-          <Option name="linux24_tcp_sack"></Option>
-          <Option name="linux24_tcp_syncookies"></Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_sack"/>
+          <Option name="linux24_tcp_syncookies"/>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">False</Option>
           <Option name="local_nat">False</Option>
           <Option name="log_all">False</Option>
@@ -14860,26 +15406,26 @@
           <Option name="log_level">debug</Option>
           <Option name="log_limit_suffix">/second</Option>
           <Option name="log_limit_value">0</Option>
-          <Option name="log_prefix"></Option>
+          <Option name="log_prefix"/>
           <Option name="log_tcp_opt">False</Option>
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"></Option>
+          <Option name="mgmt_addr"/>
           <Option name="mgmt_ssh">False</Option>
           <Option name="no_iochains_for_any">False</Option>
           <Option name="no_optimisation">False</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="platform">iptables</Option>
           <Option name="prolog_place">top</Option>
-          <Option name="prolog_script"></Option>
+          <Option name="prolog_script"/>
           <Option name="proxy_arp">False</Option>
-          <Option name="scpArgs"></Option>
-          <Option name="script_env_path"></Option>
-          <Option name="script_name_on_firewall"></Option>
-          <Option name="snmp_contact"></Option>
-          <Option name="snmp_description"></Option>
-          <Option name="snmp_location"></Option>
-          <Option name="sshArgs"></Option>
+          <Option name="scpArgs"/>
+          <Option name="script_env_path"/>
+          <Option name="script_name_on_firewall"/>
+          <Option name="snmp_contact"/>
+          <Option name="snmp_description"/>
+          <Option name="snmp_location"/>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -14911,6 +15457,9 @@
             <TSrv neg="False">
               <ServiceRef ref="id3DDDE4E4"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3DE472C4" disabled="False" group="" position="1" action="Translate" comment="">
@@ -14932,6 +15481,9 @@
             <TSrv neg="False">
               <ServiceRef ref="id3DDDE4E4"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3DE47209" disabled="False" group="" position="2" action="Translate" comment="">
@@ -14953,6 +15505,9 @@
             <TSrv neg="False">
               <ServiceRef ref="id3DDDE4E4"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3DE3B872" disabled="False" group="" position="3" action="Translate" comment="">
@@ -14974,6 +15529,9 @@
             <TSrv neg="False">
               <ServiceRef ref="id3DDDE4E4"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3DE3B9B2" disabled="False" group="" position="4" action="Translate" comment="">
@@ -14995,6 +15553,9 @@
             <TSrv neg="False">
               <ServiceRef ref="id3DDDE4E4"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3DE66C32" disabled="False" group="" position="5" action="Translate" comment="">
@@ -15016,6 +15577,9 @@
             <TSrv neg="False">
               <ServiceRef ref="id3DDDE4E4"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3ED59A8C" disabled="False" group="" position="6" action="Translate" comment="">
@@ -15037,6 +15601,9 @@
             <TSrv neg="False">
               <ServiceRef ref="id3DDDE4E4"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3ED59B00" disabled="False" group="" position="7" action="Translate" comment="port-only translation">
@@ -15058,6 +15625,9 @@
             <TSrv neg="False">
               <ServiceRef ref="id3ED59BF1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3ED59E9D" disabled="False" group="" position="8" action="Translate" comment="">
@@ -15079,6 +15649,9 @@
             <TSrv neg="False">
               <ServiceRef ref="id3ED59BF1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id62195X80061" disabled="False" group="" position="9" action="Translate" comment="port-only translation">
@@ -15100,6 +15673,9 @@
             <TSrv neg="False">
               <ServiceRef ref="id3DDDE4E4"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3ED59D48" disabled="False" group="" position="10" action="Translate" comment="">
@@ -15121,6 +15697,9 @@
             <TSrv neg="False">
               <ServiceRef ref="id3DDDE4E4"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id46723X95438" disabled="False" group="" position="11" action="Translate" comment="SDNAT ">
@@ -15142,6 +15721,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id46776X95438" disabled="False" group="" position="12" action="Translate" comment="SDNAT with source port">
@@ -15163,6 +15745,9 @@
             <TSrv neg="False">
               <ServiceRef ref="id46457X95438"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id46829X95438" disabled="False" group="" position="13" action="Translate" comment="SDNAT with dest port">
@@ -15184,6 +15769,9 @@
             <TSrv neg="False">
               <ServiceRef ref="id46492X95438"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id46882X95438" disabled="False" group="" position="14" action="Translate" comment="SDNAT&#10;translate src and dst addresses&#10;and src and dst ports">
@@ -15205,6 +15793,9 @@
             <TSrv neg="False">
               <ServiceRef ref="id46627X95438"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id46935X95438" disabled="False" group="" position="15" action="Translate" comment="">
@@ -15226,6 +15817,9 @@
             <TSrv neg="False">
               <ServiceRef ref="id46457X95438"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id46988X95438" disabled="False" group="" position="16" action="Translate" comment="invalid rule">
@@ -15247,6 +15841,9 @@
             <TSrv neg="False">
               <ServiceRef ref="id46457X95438"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <RuleSetOptions/>
@@ -15315,36 +15912,36 @@
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">False</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
-          <Option name="cmdline"></Option>
-          <Option name="compiler"></Option>
+          <Option name="cmdline"/>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="ignore_empty_groups">False</Option>
-          <Option name="limit_suffix"></Option>
+          <Option name="limit_suffix"/>
           <Option name="limit_value">0</Option>
-          <Option name="linux24_accept_redirects"></Option>
-          <Option name="linux24_accept_source_route"></Option>
-          <Option name="linux24_icmp_echo_ignore_all"></Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
-          <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
-          <Option name="linux24_ip_dynaddr"></Option>
-          <Option name="linux24_ip_forward"></Option>
-          <Option name="linux24_log_martians"></Option>
-          <Option name="linux24_path_ip"></Option>
-          <Option name="linux24_path_iptables"></Option>
-          <Option name="linux24_path_logger"></Option>
-          <Option name="linux24_path_lsmod"></Option>
-          <Option name="linux24_path_modprobe"></Option>
-          <Option name="linux24_rp_filter"></Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_accept_redirects"/>
+          <Option name="linux24_accept_source_route"/>
+          <Option name="linux24_icmp_echo_ignore_all"/>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
+          <Option name="linux24_icmp_ignore_bogus_error_responses"/>
+          <Option name="linux24_ip_dynaddr"/>
+          <Option name="linux24_ip_forward"/>
+          <Option name="linux24_log_martians"/>
+          <Option name="linux24_path_ip"/>
+          <Option name="linux24_path_iptables"/>
+          <Option name="linux24_path_logger"/>
+          <Option name="linux24_path_lsmod"/>
+          <Option name="linux24_path_modprobe"/>
+          <Option name="linux24_rp_filter"/>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">30</Option>
           <Option name="linux24_tcp_keepalive_interval">1800</Option>
-          <Option name="linux24_tcp_sack"></Option>
-          <Option name="linux24_tcp_syncookies"></Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_sack"/>
+          <Option name="linux24_tcp_syncookies"/>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">True</Option>
           <Option name="local_nat">False</Option>
           <Option name="log_all">False</Option>
@@ -15356,9 +15953,9 @@
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">True</Option>
           <Option name="no_optimisation">False</Option>
-          <Option name="snmp_contact"></Option>
-          <Option name="snmp_description"></Option>
-          <Option name="snmp_location"></Option>
+          <Option name="snmp_contact"/>
+          <Option name="snmp_description"/>
+          <Option name="snmp_location"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -15388,6 +15985,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3DE68B5B" disabled="False" group="" position="1" action="Translate" comment="">
@@ -15409,6 +16009,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <RuleSetOptions/>
@@ -15495,36 +16098,36 @@
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">False</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
-          <Option name="cmdline"></Option>
-          <Option name="compiler"></Option>
+          <Option name="cmdline"/>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="ignore_empty_groups">True</Option>
-          <Option name="limit_suffix"></Option>
+          <Option name="limit_suffix"/>
           <Option name="limit_value">0</Option>
-          <Option name="linux24_accept_redirects"></Option>
-          <Option name="linux24_accept_source_route"></Option>
-          <Option name="linux24_icmp_echo_ignore_all"></Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
-          <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
-          <Option name="linux24_ip_dynaddr"></Option>
-          <Option name="linux24_ip_forward"></Option>
-          <Option name="linux24_log_martians"></Option>
-          <Option name="linux24_path_ip"></Option>
-          <Option name="linux24_path_iptables"></Option>
-          <Option name="linux24_path_logger"></Option>
-          <Option name="linux24_path_lsmod"></Option>
-          <Option name="linux24_path_modprobe"></Option>
-          <Option name="linux24_rp_filter"></Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_accept_redirects"/>
+          <Option name="linux24_accept_source_route"/>
+          <Option name="linux24_icmp_echo_ignore_all"/>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
+          <Option name="linux24_icmp_ignore_bogus_error_responses"/>
+          <Option name="linux24_ip_dynaddr"/>
+          <Option name="linux24_ip_forward"/>
+          <Option name="linux24_log_martians"/>
+          <Option name="linux24_path_ip"/>
+          <Option name="linux24_path_iptables"/>
+          <Option name="linux24_path_logger"/>
+          <Option name="linux24_path_lsmod"/>
+          <Option name="linux24_path_modprobe"/>
+          <Option name="linux24_rp_filter"/>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">30</Option>
           <Option name="linux24_tcp_keepalive_interval">1800</Option>
-          <Option name="linux24_tcp_sack"></Option>
-          <Option name="linux24_tcp_syncookies"></Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_sack"/>
+          <Option name="linux24_tcp_syncookies"/>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">True</Option>
           <Option name="local_nat">False</Option>
           <Option name="log_all">False</Option>
@@ -15536,9 +16139,9 @@
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">True</Option>
           <Option name="no_optimisation">False</Option>
-          <Option name="snmp_contact"></Option>
-          <Option name="snmp_description"></Option>
-          <Option name="snmp_location"></Option>
+          <Option name="snmp_contact"/>
+          <Option name="snmp_description"/>
+          <Option name="snmp_location"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -15568,6 +16171,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3DE71225" disabled="False" group="" position="1" action="Translate" comment="">
@@ -15589,6 +16195,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3DE7203A" disabled="False" group="" position="2" action="Translate" comment="">
@@ -15610,6 +16219,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3DE720E6" disabled="False" group="" position="3" action="Translate" comment="">
@@ -15631,6 +16243,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3DE72150" disabled="False" group="" position="4" action="Translate" comment="I guess this rule does not make much sense">
@@ -15652,6 +16267,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3DE721CA" disabled="False" group="" position="5" action="Translate" comment="">
@@ -15673,6 +16291,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3DE7236A" disabled="False" group="" position="6" action="Translate" comment="">
@@ -15694,6 +16315,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <RuleSetOptions/>
@@ -15729,36 +16353,36 @@
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">False</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
-          <Option name="cmdline"></Option>
-          <Option name="compiler"></Option>
+          <Option name="cmdline"/>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="ignore_empty_groups">True</Option>
-          <Option name="limit_suffix"></Option>
+          <Option name="limit_suffix"/>
           <Option name="limit_value">0</Option>
-          <Option name="linux24_accept_redirects"></Option>
-          <Option name="linux24_accept_source_route"></Option>
-          <Option name="linux24_icmp_echo_ignore_all"></Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
-          <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
-          <Option name="linux24_ip_dynaddr"></Option>
-          <Option name="linux24_ip_forward"></Option>
-          <Option name="linux24_log_martians"></Option>
-          <Option name="linux24_path_ip"></Option>
-          <Option name="linux24_path_iptables"></Option>
-          <Option name="linux24_path_logger"></Option>
-          <Option name="linux24_path_lsmod"></Option>
-          <Option name="linux24_path_modprobe"></Option>
-          <Option name="linux24_rp_filter"></Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_accept_redirects"/>
+          <Option name="linux24_accept_source_route"/>
+          <Option name="linux24_icmp_echo_ignore_all"/>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
+          <Option name="linux24_icmp_ignore_bogus_error_responses"/>
+          <Option name="linux24_ip_dynaddr"/>
+          <Option name="linux24_ip_forward"/>
+          <Option name="linux24_log_martians"/>
+          <Option name="linux24_path_ip"/>
+          <Option name="linux24_path_iptables"/>
+          <Option name="linux24_path_logger"/>
+          <Option name="linux24_path_lsmod"/>
+          <Option name="linux24_path_modprobe"/>
+          <Option name="linux24_rp_filter"/>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">30</Option>
           <Option name="linux24_tcp_keepalive_interval">1800</Option>
-          <Option name="linux24_tcp_sack"></Option>
-          <Option name="linux24_tcp_syncookies"></Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_sack"/>
+          <Option name="linux24_tcp_syncookies"/>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">True</Option>
           <Option name="local_nat">False</Option>
           <Option name="log_all">False</Option>
@@ -15770,9 +16394,9 @@
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">True</Option>
           <Option name="no_optimisation">False</Option>
-          <Option name="snmp_contact"></Option>
-          <Option name="snmp_description"></Option>
-          <Option name="snmp_location"></Option>
+          <Option name="snmp_contact"/>
+          <Option name="snmp_description"/>
+          <Option name="snmp_location"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -15853,36 +16477,36 @@
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">False</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
-          <Option name="cmdline"></Option>
-          <Option name="compiler"></Option>
+          <Option name="cmdline"/>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="firewall_is_part_of_any_and_networks">False</Option>
           <Option name="ignore_empty_groups">False</Option>
-          <Option name="limit_suffix"></Option>
+          <Option name="limit_suffix"/>
           <Option name="limit_value">0</Option>
-          <Option name="linux24_accept_redirects"></Option>
-          <Option name="linux24_accept_source_route"></Option>
-          <Option name="linux24_icmp_echo_ignore_all"></Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
-          <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
-          <Option name="linux24_ip_dynaddr"></Option>
-          <Option name="linux24_ip_forward"></Option>
-          <Option name="linux24_log_martians"></Option>
-          <Option name="linux24_path_ip"></Option>
-          <Option name="linux24_path_iptables"></Option>
-          <Option name="linux24_path_logger"></Option>
-          <Option name="linux24_path_lsmod"></Option>
-          <Option name="linux24_path_modprobe"></Option>
-          <Option name="linux24_rp_filter"></Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_accept_redirects"/>
+          <Option name="linux24_accept_source_route"/>
+          <Option name="linux24_icmp_echo_ignore_all"/>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
+          <Option name="linux24_icmp_ignore_bogus_error_responses"/>
+          <Option name="linux24_ip_dynaddr"/>
+          <Option name="linux24_ip_forward"/>
+          <Option name="linux24_log_martians"/>
+          <Option name="linux24_path_ip"/>
+          <Option name="linux24_path_iptables"/>
+          <Option name="linux24_path_logger"/>
+          <Option name="linux24_path_lsmod"/>
+          <Option name="linux24_path_modprobe"/>
+          <Option name="linux24_rp_filter"/>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">30</Option>
           <Option name="linux24_tcp_keepalive_interval">1800</Option>
-          <Option name="linux24_tcp_sack"></Option>
-          <Option name="linux24_tcp_syncookies"></Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_sack"/>
+          <Option name="linux24_tcp_syncookies"/>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">True</Option>
           <Option name="local_nat">False</Option>
           <Option name="log_all">False</Option>
@@ -15894,9 +16518,9 @@
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">True</Option>
           <Option name="no_optimisation">False</Option>
-          <Option name="snmp_contact"></Option>
-          <Option name="snmp_description"></Option>
-          <Option name="snmp_location"></Option>
+          <Option name="snmp_contact"/>
+          <Option name="snmp_description"/>
+          <Option name="snmp_location"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -15926,6 +16550,9 @@
             <TSrv neg="False">
               <ServiceRef ref="tcp-HTTP"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3E189491" disabled="False" group="" position="1" action="Translate" comment="">
@@ -15947,6 +16574,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3E6988D3" disabled="False" group="" position="2" action="Translate" comment="">
@@ -15968,6 +16598,9 @@
             <TSrv neg="False">
               <ServiceRef ref="id3B5009F7"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id418A3247" disabled="False" group="" position="3" action="Translate" comment="">
@@ -15990,6 +16623,9 @@
             <TSrv neg="False">
               <ServiceRef ref="id3B5009F7"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id4188B45D" disabled="False" group="" position="4" action="Translate" comment="">
@@ -16011,6 +16647,9 @@
             <TSrv neg="False">
               <ServiceRef ref="id3B5009F7"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id4188B514" disabled="False" group="" position="5" action="Translate" comment="">
@@ -16032,6 +16671,9 @@
             <TSrv neg="False">
               <ServiceRef ref="id3B5009F7"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id4188D4D7" disabled="False" group="" position="6" action="Translate" comment="">
@@ -16053,6 +16695,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id418A524D" disabled="False" group="" position="7" action="Translate" comment="">
@@ -16075,6 +16720,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id41860063" disabled="False" group="" position="8" action="Translate" comment="">
@@ -16096,6 +16744,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id41873ACE" disabled="False" group="" position="9" action="Translate" comment="">
@@ -16117,6 +16768,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id418933C7" disabled="False" group="" position="10" action="Translate" comment="">
@@ -16138,6 +16792,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id418A527D" disabled="False" group="" position="11" action="Translate" comment="">
@@ -16160,6 +16817,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id418933E4" disabled="False" group="" position="12" action="Translate" comment="">
@@ -16181,6 +16841,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id418933D6" disabled="False" group="" position="13" action="Translate" comment="">
@@ -16202,6 +16865,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <RuleSetOptions/>
@@ -16271,45 +16937,45 @@
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
           <Option name="action_on_reject">ICMP host prohibited</Option>
-          <Option name="activationCmd"></Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="activationCmd"/>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">False</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
-          <Option name="cmdline"></Option>
-          <Option name="compiler"></Option>
+          <Option name="cmdline"/>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="drop_invalid">False</Option>
-          <Option name="epilog_script"></Option>
-          <Option name="firewall_dir"></Option>
+          <Option name="epilog_script"/>
+          <Option name="firewall_dir"/>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="ignore_empty_groups">True</Option>
-          <Option name="limit_suffix"></Option>
+          <Option name="limit_suffix"/>
           <Option name="limit_value">0</Option>
-          <Option name="linux24_accept_redirects"></Option>
-          <Option name="linux24_accept_source_route"></Option>
-          <Option name="linux24_icmp_echo_ignore_all"></Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
-          <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
-          <Option name="linux24_ip_dynaddr"></Option>
-          <Option name="linux24_ip_forward"></Option>
-          <Option name="linux24_log_martians"></Option>
-          <Option name="linux24_path_ip"></Option>
-          <Option name="linux24_path_iptables"></Option>
-          <Option name="linux24_path_logger"></Option>
-          <Option name="linux24_path_lsmod"></Option>
-          <Option name="linux24_path_modprobe"></Option>
-          <Option name="linux24_rp_filter"></Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_accept_redirects"/>
+          <Option name="linux24_accept_source_route"/>
+          <Option name="linux24_icmp_echo_ignore_all"/>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
+          <Option name="linux24_icmp_ignore_bogus_error_responses"/>
+          <Option name="linux24_ip_dynaddr"/>
+          <Option name="linux24_ip_forward"/>
+          <Option name="linux24_log_martians"/>
+          <Option name="linux24_path_ip"/>
+          <Option name="linux24_path_iptables"/>
+          <Option name="linux24_path_logger"/>
+          <Option name="linux24_path_lsmod"/>
+          <Option name="linux24_path_modprobe"/>
+          <Option name="linux24_rp_filter"/>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">30</Option>
           <Option name="linux24_tcp_keepalive_interval">1800</Option>
-          <Option name="linux24_tcp_sack"></Option>
-          <Option name="linux24_tcp_syncookies"></Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_sack"/>
+          <Option name="linux24_tcp_syncookies"/>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">True</Option>
           <Option name="local_nat">True</Option>
           <Option name="log_all">False</Option>
@@ -16321,15 +16987,15 @@
           <Option name="log_tcp_opt">False</Option>
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"></Option>
+          <Option name="mgmt_addr"/>
           <Option name="mgmt_ssh">False</Option>
           <Option name="no_optimisation">False</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="prolog_place">top</Option>
-          <Option name="prolog_script"></Option>
-          <Option name="snmp_contact"></Option>
-          <Option name="snmp_description"></Option>
-          <Option name="snmp_location"></Option>
+          <Option name="prolog_script"/>
+          <Option name="snmp_contact"/>
+          <Option name="snmp_description"/>
+          <Option name="snmp_location"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -16360,6 +17026,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3E1C6D1F" disabled="False" group="" position="1" action="Translate" comment="compiler should add &quot;-o eth2&quot;">
@@ -16381,6 +17050,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <RuleSetOptions/>
@@ -16423,13 +17095,13 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="firewall_is_part_of_any_and_networks">False</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="rule_name_accounting">rule0acct</Option>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
@@ -16452,13 +17124,13 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="firewall_is_part_of_any_and_networks">False</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="rule_name_accounting">rule1acct</Option>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
@@ -16481,14 +17153,14 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="firewall_is_part_of_any_and_networks">False</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -16591,41 +17263,41 @@
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">False</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
-          <Option name="cmdline"></Option>
-          <Option name="compiler"></Option>
+          <Option name="cmdline"/>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="dyn_addr">False</Option>
           <Option name="firewall_is_part_of_any">True</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="ignore_empty_groups">False</Option>
-          <Option name="inst_cmdline"></Option>
-          <Option name="inst_script"></Option>
-          <Option name="install_script"></Option>
+          <Option name="inst_cmdline"/>
+          <Option name="inst_script"/>
+          <Option name="install_script"/>
           <Option name="limit_suffix">/day</Option>
           <Option name="limit_value">0</Option>
-          <Option name="linux24_accept_redirects"></Option>
-          <Option name="linux24_accept_source_route"></Option>
-          <Option name="linux24_icmp_echo_ignore_all"></Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
-          <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
-          <Option name="linux24_ip_dynaddr"></Option>
-          <Option name="linux24_ip_forward"></Option>
-          <Option name="linux24_log_martians"></Option>
-          <Option name="linux24_path_ip"></Option>
-          <Option name="linux24_path_iptables"></Option>
-          <Option name="linux24_path_logger"></Option>
-          <Option name="linux24_path_lsmod"></Option>
-          <Option name="linux24_path_modprobe"></Option>
-          <Option name="linux24_rp_filter"></Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_accept_redirects"/>
+          <Option name="linux24_accept_source_route"/>
+          <Option name="linux24_icmp_echo_ignore_all"/>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
+          <Option name="linux24_icmp_ignore_bogus_error_responses"/>
+          <Option name="linux24_ip_dynaddr"/>
+          <Option name="linux24_ip_forward"/>
+          <Option name="linux24_log_martians"/>
+          <Option name="linux24_path_ip"/>
+          <Option name="linux24_path_iptables"/>
+          <Option name="linux24_path_logger"/>
+          <Option name="linux24_path_lsmod"/>
+          <Option name="linux24_path_modprobe"/>
+          <Option name="linux24_rp_filter"/>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">30</Option>
           <Option name="linux24_tcp_keepalive_interval">1800</Option>
-          <Option name="linux24_tcp_sack"></Option>
-          <Option name="linux24_tcp_syncookies"></Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_sack"/>
+          <Option name="linux24_tcp_syncookies"/>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">False</Option>
           <Option name="local_nat">False</Option>
           <Option name="log_all">False</Option>
@@ -16642,10 +17314,10 @@
           <Option name="no_optimisation">False</Option>
           <Option name="platform">iptables</Option>
           <Option name="proxy_arp">False</Option>
-          <Option name="script_env_path"></Option>
-          <Option name="snmp_contact"></Option>
-          <Option name="snmp_description"></Option>
-          <Option name="snmp_location"></Option>
+          <Option name="script_env_path"/>
+          <Option name="snmp_contact"/>
+          <Option name="snmp_description"/>
+          <Option name="snmp_location"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -16676,6 +17348,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3EE4CBC6" disabled="False" group="" position="1" action="Translate" comment="">
@@ -16697,6 +17372,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3EE4CBF2" disabled="False" group="" position="2" action="Translate" comment="">
@@ -16718,6 +17396,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3EE4CC1D" disabled="False" group="" position="3" action="Translate" comment="">
@@ -16739,6 +17420,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3EE4CCB5" disabled="False" group="" position="4" action="Translate" comment="">
@@ -16760,6 +17444,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3EE4CCDF" disabled="False" group="" position="5" action="Translate" comment="">
@@ -16781,6 +17468,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3EE4CEA6" disabled="False" group="" position="6" action="Translate" comment="">
@@ -16802,6 +17492,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <RuleSetOptions/>
@@ -16936,43 +17629,43 @@
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
           <Option name="action_on_reject">ICMP host prohibited</Option>
-          <Option name="activationCmd"></Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="activationCmd"/>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">True</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
-          <Option name="cmdline"></Option>
-          <Option name="compiler"></Option>
+          <Option name="cmdline"/>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
-          <Option name="firewall_dir"></Option>
+          <Option name="firewall_dir"/>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="ignore_empty_groups">False</Option>
-          <Option name="limit_suffix"></Option>
+          <Option name="limit_suffix"/>
           <Option name="limit_value">0</Option>
-          <Option name="linux24_accept_redirects"></Option>
-          <Option name="linux24_accept_source_route"></Option>
-          <Option name="linux24_icmp_echo_ignore_all"></Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
-          <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
-          <Option name="linux24_ip_dynaddr"></Option>
+          <Option name="linux24_accept_redirects"/>
+          <Option name="linux24_accept_source_route"/>
+          <Option name="linux24_icmp_echo_ignore_all"/>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
+          <Option name="linux24_icmp_ignore_bogus_error_responses"/>
+          <Option name="linux24_ip_dynaddr"/>
           <Option name="linux24_ip_forward">1</Option>
-          <Option name="linux24_log_martians"></Option>
-          <Option name="linux24_path_ip"></Option>
-          <Option name="linux24_path_iptables"></Option>
-          <Option name="linux24_path_logger"></Option>
-          <Option name="linux24_path_lsmod"></Option>
-          <Option name="linux24_path_modprobe"></Option>
-          <Option name="linux24_rp_filter"></Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_log_martians"/>
+          <Option name="linux24_path_ip"/>
+          <Option name="linux24_path_iptables"/>
+          <Option name="linux24_path_logger"/>
+          <Option name="linux24_path_lsmod"/>
+          <Option name="linux24_path_modprobe"/>
+          <Option name="linux24_rp_filter"/>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">30</Option>
           <Option name="linux24_tcp_keepalive_interval">1800</Option>
-          <Option name="linux24_tcp_sack"></Option>
-          <Option name="linux24_tcp_syncookies"></Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_sack"/>
+          <Option name="linux24_tcp_syncookies"/>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">True</Option>
           <Option name="local_nat">False</Option>
           <Option name="log_all">False</Option>
@@ -16984,9 +17677,9 @@
           <Option name="log_tcp_seq">False</Option>
           <Option name="loopback_interface">lo</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="snmp_contact"></Option>
-          <Option name="snmp_description"></Option>
-          <Option name="snmp_location"></Option>
+          <Option name="snmp_contact"/>
+          <Option name="snmp_description"/>
+          <Option name="snmp_location"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -17093,12 +17786,12 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="limit_burst">0</Option>
               <Option name="limit_suffix">/second</Option>
               <Option name="limit_value">2</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -17139,12 +17832,12 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -17225,10 +17918,10 @@
             <PolicyRuleOptions>
               <Option name="action_on_reject">TCP RST</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -17328,36 +18021,36 @@
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">False</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
-          <Option name="cmdline"></Option>
-          <Option name="compiler"></Option>
+          <Option name="cmdline"/>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="ignore_empty_groups">False</Option>
-          <Option name="limit_suffix"></Option>
+          <Option name="limit_suffix"/>
           <Option name="limit_value">0</Option>
-          <Option name="linux24_accept_redirects"></Option>
-          <Option name="linux24_accept_source_route"></Option>
-          <Option name="linux24_icmp_echo_ignore_all"></Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
-          <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
-          <Option name="linux24_ip_dynaddr"></Option>
+          <Option name="linux24_accept_redirects"/>
+          <Option name="linux24_accept_source_route"/>
+          <Option name="linux24_icmp_echo_ignore_all"/>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
+          <Option name="linux24_icmp_ignore_bogus_error_responses"/>
+          <Option name="linux24_ip_dynaddr"/>
           <Option name="linux24_ip_forward">1</Option>
-          <Option name="linux24_log_martians"></Option>
-          <Option name="linux24_path_ip"></Option>
-          <Option name="linux24_path_iptables"></Option>
-          <Option name="linux24_path_logger"></Option>
-          <Option name="linux24_path_lsmod"></Option>
-          <Option name="linux24_path_modprobe"></Option>
-          <Option name="linux24_rp_filter"></Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_log_martians"/>
+          <Option name="linux24_path_ip"/>
+          <Option name="linux24_path_iptables"/>
+          <Option name="linux24_path_logger"/>
+          <Option name="linux24_path_lsmod"/>
+          <Option name="linux24_path_modprobe"/>
+          <Option name="linux24_rp_filter"/>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">30</Option>
           <Option name="linux24_tcp_keepalive_interval">1800</Option>
-          <Option name="linux24_tcp_sack"></Option>
-          <Option name="linux24_tcp_syncookies"></Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_sack"/>
+          <Option name="linux24_tcp_syncookies"/>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">True</Option>
           <Option name="local_nat">False</Option>
           <Option name="log_all">False</Option>
@@ -17369,9 +18062,9 @@
           <Option name="log_tcp_seq">False</Option>
           <Option name="loopback_interface">lo</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="snmp_contact"></Option>
-          <Option name="snmp_description"></Option>
-          <Option name="snmp_location"></Option>
+          <Option name="snmp_contact"/>
+          <Option name="snmp_description"/>
+          <Option name="snmp_location"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -17401,6 +18094,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3EFBC658" disabled="False" group="" position="1" action="Translate" comment="">
@@ -17422,6 +18118,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id1009519X12234" disabled="False" group="" position="2" action="Translate" comment="">
@@ -17443,6 +18142,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id1391329X69541" disabled="False" group="" position="3" action="Translate" comment="">
@@ -17464,6 +18166,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
               <Option name="ipt_nat_random">True</Option>
               <Option name="ipt_snat_random">True</Option>
@@ -17489,6 +18194,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
               <Option name="ipt_snat_random">False</Option>
               <Option name="ipt_use_snat_instead_of_masq">True</Option>
@@ -17513,6 +18221,9 @@
             <TSrv neg="False">
               <ServiceRef ref="tcp-SSH"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3FADADE5" disabled="False" group="" position="6" action="Translate" comment="">
@@ -17534,6 +18245,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id647653X13110" disabled="False" group="" position="7" action="Translate" comment="">
@@ -17556,6 +18270,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <RuleSetOptions/>
@@ -17716,7 +18433,7 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id3EFBC67F" disabled="False" group="" log="False" position="8" action="Accept" direction="Both" comment="">
@@ -17940,11 +18657,11 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
-              <Option name="id"></Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="action_on_reject"/>
+              <Option name="id"/>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -17977,59 +18694,59 @@
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">False</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
-          <Option name="cmdline"></Option>
-          <Option name="compiler"></Option>
+          <Option name="cmdline"/>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="dyn_addr">False</Option>
           <Option name="firewall_is_part_of_any">True</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
-          <Option name="id"></Option>
+          <Option name="id"/>
           <Option name="ignore_empty_groups">False</Option>
-          <Option name="install_script"></Option>
+          <Option name="install_script"/>
           <Option name="limit_suffix">/day</Option>
           <Option name="limit_value">0</Option>
-          <Option name="linux24_accept_redirects"></Option>
-          <Option name="linux24_accept_source_route"></Option>
-          <Option name="linux24_icmp_echo_ignore_all"></Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
-          <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
-          <Option name="linux24_ip_dynaddr"></Option>
-          <Option name="linux24_ip_forward"></Option>
-          <Option name="linux24_log_martians"></Option>
-          <Option name="linux24_path_ip"></Option>
-          <Option name="linux24_path_iptables"></Option>
-          <Option name="linux24_path_logger"></Option>
-          <Option name="linux24_path_lsmod"></Option>
-          <Option name="linux24_path_modprobe"></Option>
-          <Option name="linux24_rp_filter"></Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_accept_redirects"/>
+          <Option name="linux24_accept_source_route"/>
+          <Option name="linux24_icmp_echo_ignore_all"/>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
+          <Option name="linux24_icmp_ignore_bogus_error_responses"/>
+          <Option name="linux24_ip_dynaddr"/>
+          <Option name="linux24_ip_forward"/>
+          <Option name="linux24_log_martians"/>
+          <Option name="linux24_path_ip"/>
+          <Option name="linux24_path_iptables"/>
+          <Option name="linux24_path_logger"/>
+          <Option name="linux24_path_lsmod"/>
+          <Option name="linux24_path_modprobe"/>
+          <Option name="linux24_rp_filter"/>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">30</Option>
           <Option name="linux24_tcp_keepalive_interval">1800</Option>
-          <Option name="linux24_tcp_sack"></Option>
-          <Option name="linux24_tcp_syncookies"></Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_sack"/>
+          <Option name="linux24_tcp_syncookies"/>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">False</Option>
           <Option name="local_nat">False</Option>
           <Option name="log_all">False</Option>
           <Option name="log_all_dropped">False</Option>
           <Option name="log_ip_opt">False</Option>
-          <Option name="log_level"></Option>
-          <Option name="log_limit_suffix"></Option>
+          <Option name="log_level"/>
+          <Option name="log_limit_suffix"/>
           <Option name="log_limit_value">0</Option>
-          <Option name="log_prefix"></Option>
+          <Option name="log_prefix"/>
           <Option name="log_tcp_opt">False</Option>
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">True</Option>
           <Option name="no_iochains_for_any">False</Option>
           <Option name="no_optimisation">False</Option>
           <Option name="platform">iptables</Option>
-          <Option name="script_env_path"></Option>
-          <Option name="snmp_contact"></Option>
-          <Option name="snmp_description"></Option>
-          <Option name="snmp_location"></Option>
+          <Option name="script_env_path"/>
+          <Option name="snmp_contact"/>
+          <Option name="snmp_description"/>
+          <Option name="snmp_location"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -18060,6 +18777,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3F2A008C" disabled="False" group="" position="1" action="Translate" comment="">
@@ -18082,6 +18802,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
               <Option name="ipt_nat_random">True</Option>
               <Option name="ipt_use_snat_instead_of_masq">False</Option>
@@ -18106,6 +18829,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id2608974X69541" disabled="False" group="" position="3" action="Translate" comment="">
@@ -18127,6 +18853,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
               <Option name="ipt_nat_random">True</Option>
               <Option name="ipt_snat_random">True</Option>
@@ -18152,6 +18881,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
               <Option name="ipt_use_snat_instead_of_masq">True</Option>
             </NATRuleOptions>
@@ -18175,6 +18907,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
               <Option name="ipt_nat_random">True</Option>
               <Option name="ipt_snat_random">True</Option>
@@ -18292,41 +19027,41 @@
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">False</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
-          <Option name="cmdline"></Option>
-          <Option name="compiler"></Option>
+          <Option name="cmdline"/>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="dyn_addr">False</Option>
           <Option name="firewall_is_part_of_any">True</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="ignore_empty_groups">False</Option>
-          <Option name="inst_cmdline"></Option>
-          <Option name="inst_script"></Option>
-          <Option name="install_script"></Option>
+          <Option name="inst_cmdline"/>
+          <Option name="inst_script"/>
+          <Option name="install_script"/>
           <Option name="limit_suffix">/day</Option>
           <Option name="limit_value">0</Option>
-          <Option name="linux24_accept_redirects"></Option>
-          <Option name="linux24_accept_source_route"></Option>
-          <Option name="linux24_icmp_echo_ignore_all"></Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
-          <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
-          <Option name="linux24_ip_dynaddr"></Option>
-          <Option name="linux24_ip_forward"></Option>
-          <Option name="linux24_log_martians"></Option>
-          <Option name="linux24_path_ip"></Option>
-          <Option name="linux24_path_iptables"></Option>
-          <Option name="linux24_path_logger"></Option>
-          <Option name="linux24_path_lsmod"></Option>
-          <Option name="linux24_path_modprobe"></Option>
-          <Option name="linux24_rp_filter"></Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_accept_redirects"/>
+          <Option name="linux24_accept_source_route"/>
+          <Option name="linux24_icmp_echo_ignore_all"/>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
+          <Option name="linux24_icmp_ignore_bogus_error_responses"/>
+          <Option name="linux24_ip_dynaddr"/>
+          <Option name="linux24_ip_forward"/>
+          <Option name="linux24_log_martians"/>
+          <Option name="linux24_path_ip"/>
+          <Option name="linux24_path_iptables"/>
+          <Option name="linux24_path_logger"/>
+          <Option name="linux24_path_lsmod"/>
+          <Option name="linux24_path_modprobe"/>
+          <Option name="linux24_rp_filter"/>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">30</Option>
           <Option name="linux24_tcp_keepalive_interval">1800</Option>
-          <Option name="linux24_tcp_sack"></Option>
-          <Option name="linux24_tcp_syncookies"></Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_sack"/>
+          <Option name="linux24_tcp_syncookies"/>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">False</Option>
           <Option name="local_nat">False</Option>
           <Option name="log_all">False</Option>
@@ -18343,10 +19078,10 @@
           <Option name="no_optimisation">False</Option>
           <Option name="platform">iptables</Option>
           <Option name="proxy_arp">False</Option>
-          <Option name="script_env_path"></Option>
-          <Option name="snmp_contact"></Option>
-          <Option name="snmp_description"></Option>
-          <Option name="snmp_location"></Option>
+          <Option name="script_env_path"/>
+          <Option name="snmp_contact"/>
+          <Option name="snmp_description"/>
+          <Option name="snmp_location"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -18377,6 +19112,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3FADBAC2" disabled="False" group="" position="1" action="Translate" comment="">
@@ -18398,6 +19136,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id3FADBAD4" disabled="False" group="" position="2" action="Translate" comment="">
@@ -18419,6 +19160,9 @@
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <RuleSetOptions/>
@@ -18461,13 +19205,13 @@
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
-              <Option name="id"></Option>
+              <Option name="action_on_reject"/>
+              <Option name="id"/>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="log_level">error</Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">10</Option>
             </PolicyRuleOptions>
@@ -18497,59 +19241,59 @@
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">False</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
-          <Option name="cmdline"></Option>
-          <Option name="compiler"></Option>
+          <Option name="cmdline"/>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="dyn_addr">False</Option>
           <Option name="firewall_is_part_of_any">True</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
-          <Option name="id"></Option>
+          <Option name="id"/>
           <Option name="ignore_empty_groups">False</Option>
-          <Option name="install_script"></Option>
+          <Option name="install_script"/>
           <Option name="limit_suffix">/day</Option>
           <Option name="limit_value">0</Option>
-          <Option name="linux24_accept_redirects"></Option>
-          <Option name="linux24_accept_source_route"></Option>
-          <Option name="linux24_icmp_echo_ignore_all"></Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
-          <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
-          <Option name="linux24_ip_dynaddr"></Option>
-          <Option name="linux24_ip_forward"></Option>
-          <Option name="linux24_log_martians"></Option>
-          <Option name="linux24_path_ip"></Option>
-          <Option name="linux24_path_iptables"></Option>
-          <Option name="linux24_path_logger"></Option>
-          <Option name="linux24_path_lsmod"></Option>
-          <Option name="linux24_path_modprobe"></Option>
-          <Option name="linux24_rp_filter"></Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_accept_redirects"/>
+          <Option name="linux24_accept_source_route"/>
+          <Option name="linux24_icmp_echo_ignore_all"/>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
+          <Option name="linux24_icmp_ignore_bogus_error_responses"/>
+          <Option name="linux24_ip_dynaddr"/>
+          <Option name="linux24_ip_forward"/>
+          <Option name="linux24_log_martians"/>
+          <Option name="linux24_path_ip"/>
+          <Option name="linux24_path_iptables"/>
+          <Option name="linux24_path_logger"/>
+          <Option name="linux24_path_lsmod"/>
+          <Option name="linux24_path_modprobe"/>
+          <Option name="linux24_rp_filter"/>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">30</Option>
           <Option name="linux24_tcp_keepalive_interval">1800</Option>
-          <Option name="linux24_tcp_sack"></Option>
-          <Option name="linux24_tcp_syncookies"></Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_sack"/>
+          <Option name="linux24_tcp_syncookies"/>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">False</Option>
           <Option name="local_nat">False</Option>
           <Option name="log_all">False</Option>
           <Option name="log_all_dropped">False</Option>
           <Option name="log_ip_opt">False</Option>
-          <Option name="log_level"></Option>
-          <Option name="log_limit_suffix"></Option>
+          <Option name="log_level"/>
+          <Option name="log_limit_suffix"/>
           <Option name="log_limit_value">0</Option>
-          <Option name="log_prefix"></Option>
+          <Option name="log_prefix"/>
           <Option name="log_tcp_opt">False</Option>
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">True</Option>
           <Option name="no_iochains_for_any">False</Option>
           <Option name="no_optimisation">False</Option>
           <Option name="platform">iptables</Option>
-          <Option name="script_env_path"></Option>
-          <Option name="snmp_contact"></Option>
-          <Option name="snmp_description"></Option>
-          <Option name="snmp_location"></Option>
+          <Option name="script_env_path"/>
+          <Option name="snmp_contact"/>
+          <Option name="snmp_description"/>
+          <Option name="snmp_location"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -18898,53 +19642,53 @@
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
           <Option name="action_on_reject">ICMP net unreachable</Option>
-          <Option name="activationCmd"></Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="activationCmd"/>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">True</Option>
           <Option name="check_shading">False</Option>
           <Option name="clamp_mss_to_mtu">True</Option>
           <Option name="classify_mark_terminating">False</Option>
-          <Option name="cmdline"></Option>
-          <Option name="compiler"></Option>
+          <Option name="cmdline"/>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="drop_invalid">False</Option>
           <Option name="dyn_addr">False</Option>
           <Option name="enable_ipv6">False</Option>
-          <Option name="epilog_script"></Option>
-          <Option name="firewall_dir"></Option>
+          <Option name="epilog_script"/>
+          <Option name="firewall_dir"/>
           <Option name="firewall_is_part_of_any">True</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="ignore_empty_groups">False</Option>
-          <Option name="inst_cmdline"></Option>
-          <Option name="inst_script"></Option>
-          <Option name="install_script"></Option>
+          <Option name="inst_cmdline"/>
+          <Option name="inst_script"/>
+          <Option name="install_script"/>
           <Option name="ipv4_6_order">ipv4_first</Option>
           <Option name="limit_suffix">/day</Option>
           <Option name="limit_value">0</Option>
-          <Option name="linux24_accept_redirects"></Option>
-          <Option name="linux24_accept_source_route"></Option>
-          <Option name="linux24_icmp_echo_ignore_all"></Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
-          <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
-          <Option name="linux24_ip_dynaddr"></Option>
-          <Option name="linux24_ip_forward"></Option>
-          <Option name="linux24_log_martians"></Option>
-          <Option name="linux24_path_ip"></Option>
-          <Option name="linux24_path_iptables"></Option>
-          <Option name="linux24_path_logger"></Option>
-          <Option name="linux24_path_lsmod"></Option>
-          <Option name="linux24_path_modprobe"></Option>
-          <Option name="linux24_rp_filter"></Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_accept_redirects"/>
+          <Option name="linux24_accept_source_route"/>
+          <Option name="linux24_icmp_echo_ignore_all"/>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
+          <Option name="linux24_icmp_ignore_bogus_error_responses"/>
+          <Option name="linux24_ip_dynaddr"/>
+          <Option name="linux24_ip_forward"/>
+          <Option name="linux24_log_martians"/>
+          <Option name="linux24_path_ip"/>
+          <Option name="linux24_path_iptables"/>
+          <Option name="linux24_path_logger"/>
+          <Option name="linux24_path_lsmod"/>
+          <Option name="linux24_path_modprobe"/>
+          <Option name="linux24_rp_filter"/>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">30</Option>
           <Option name="linux24_tcp_keepalive_interval">1800</Option>
-          <Option name="linux24_tcp_sack"></Option>
-          <Option name="linux24_tcp_syncookies"></Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_sack"/>
+          <Option name="linux24_tcp_syncookies"/>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">False</Option>
           <Option name="local_nat">False</Option>
           <Option name="log_all">False</Option>
@@ -18954,25 +19698,25 @@
           <Option name="log_level">debug</Option>
           <Option name="log_limit_suffix">/second</Option>
           <Option name="log_limit_value">0</Option>
-          <Option name="log_prefix"></Option>
+          <Option name="log_prefix"/>
           <Option name="log_tcp_opt">False</Option>
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"></Option>
+          <Option name="mgmt_addr"/>
           <Option name="mgmt_ssh">False</Option>
           <Option name="no_iochains_for_any">False</Option>
           <Option name="no_ipv6_default_policy">False</Option>
           <Option name="no_optimisation">False</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="platform">iptables</Option>
           <Option name="prolog_place">top</Option>
-          <Option name="prolog_script"></Option>
+          <Option name="prolog_script"/>
           <Option name="proxy_arp">False</Option>
-          <Option name="script_env_path"></Option>
-          <Option name="snmp_contact"></Option>
-          <Option name="snmp_description"></Option>
-          <Option name="snmp_location"></Option>
-          <Option name="sshArgs"></Option>
+          <Option name="script_env_path"/>
+          <Option name="snmp_contact"/>
+          <Option name="snmp_description"/>
+          <Option name="snmp_location"/>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -19398,41 +20142,41 @@
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">False</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
-          <Option name="cmdline"></Option>
-          <Option name="compiler"></Option>
+          <Option name="cmdline"/>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="dyn_addr">False</Option>
           <Option name="firewall_is_part_of_any">True</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="ignore_empty_groups">False</Option>
-          <Option name="inst_cmdline"></Option>
-          <Option name="inst_script"></Option>
-          <Option name="install_script"></Option>
+          <Option name="inst_cmdline"/>
+          <Option name="inst_script"/>
+          <Option name="install_script"/>
           <Option name="limit_suffix">/day</Option>
           <Option name="limit_value">0</Option>
-          <Option name="linux24_accept_redirects"></Option>
-          <Option name="linux24_accept_source_route"></Option>
-          <Option name="linux24_icmp_echo_ignore_all"></Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
-          <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
-          <Option name="linux24_ip_dynaddr"></Option>
-          <Option name="linux24_ip_forward"></Option>
-          <Option name="linux24_log_martians"></Option>
-          <Option name="linux24_path_ip"></Option>
-          <Option name="linux24_path_iptables"></Option>
-          <Option name="linux24_path_logger"></Option>
-          <Option name="linux24_path_lsmod"></Option>
-          <Option name="linux24_path_modprobe"></Option>
-          <Option name="linux24_rp_filter"></Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_accept_redirects"/>
+          <Option name="linux24_accept_source_route"/>
+          <Option name="linux24_icmp_echo_ignore_all"/>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
+          <Option name="linux24_icmp_ignore_bogus_error_responses"/>
+          <Option name="linux24_ip_dynaddr"/>
+          <Option name="linux24_ip_forward"/>
+          <Option name="linux24_log_martians"/>
+          <Option name="linux24_path_ip"/>
+          <Option name="linux24_path_iptables"/>
+          <Option name="linux24_path_logger"/>
+          <Option name="linux24_path_lsmod"/>
+          <Option name="linux24_path_modprobe"/>
+          <Option name="linux24_rp_filter"/>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">30</Option>
           <Option name="linux24_tcp_keepalive_interval">1800</Option>
-          <Option name="linux24_tcp_sack"></Option>
-          <Option name="linux24_tcp_syncookies"></Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_sack"/>
+          <Option name="linux24_tcp_syncookies"/>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">False</Option>
           <Option name="local_nat">False</Option>
           <Option name="log_all">False</Option>
@@ -19441,7 +20185,7 @@
           <Option name="log_level">debug</Option>
           <Option name="log_limit_suffix">/second</Option>
           <Option name="log_limit_value">0</Option>
-          <Option name="log_prefix"></Option>
+          <Option name="log_prefix"/>
           <Option name="log_tcp_opt">False</Option>
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">True</Option>
@@ -19449,10 +20193,10 @@
           <Option name="no_optimisation">False</Option>
           <Option name="platform">iptables</Option>
           <Option name="proxy_arp">False</Option>
-          <Option name="script_env_path"></Option>
-          <Option name="snmp_contact"></Option>
-          <Option name="snmp_description"></Option>
-          <Option name="snmp_location"></Option>
+          <Option name="script_env_path"/>
+          <Option name="snmp_contact"/>
+          <Option name="snmp_description"/>
+          <Option name="snmp_location"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -19702,6 +20446,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id417C689C" disabled="False" group="" position="1" action="Translate" comment="">
@@ -19723,6 +20470,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id417C68AA" disabled="False" group="" position="2" action="Translate" comment="">
@@ -19744,6 +20494,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="tcp-SSH"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id417C68B8" disabled="False" group="" position="3" action="Translate" comment="">
@@ -19765,6 +20518,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <RuleSetOptions/>
@@ -19907,7 +20663,7 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id417C681B" disabled="False" group="" log="False" position="7" action="Accept" direction="Both" comment="">
@@ -20111,27 +20867,27 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
-              <Option name="classify_str"></Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="action_on_reject"/>
+              <Option name="classify_str"/>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">False</Option>
               <Option name="tagobject_id">id342984</Option>
             </PolicyRuleOptions>
@@ -20153,29 +20909,29 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="branch_id">id38458X96057</Option>
-              <Option name="classify_str"></Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="classify_str"/>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_reply_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_branch_in_mangle">True</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_reply_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -20196,29 +20952,29 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="branch_id">id1821563X72329</Option>
-              <Option name="classify_str"></Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="classify_str"/>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_copy_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_branch_in_mangle">True</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_reply_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -20239,29 +20995,29 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="branch_id">id38458X96057</Option>
-              <Option name="classify_str"></Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="classify_str"/>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_reply_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_branch_in_mangle">True</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_reply_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -20282,29 +21038,29 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="branch_id">id1821563X72329</Option>
-              <Option name="classify_str"></Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="classify_str"/>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_copy_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_branch_in_mangle">True</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_reply_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -20325,11 +21081,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
-              <Option name="id"></Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="action_on_reject"/>
+              <Option name="id"/>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -20490,62 +21246,62 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">False</Option>
           <Option name="action_on_reject">ICMP host prohibited</Option>
-          <Option name="activationCmd"></Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="activationCmd"/>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">False</Option>
           <Option name="clamp_mss_to_mtu">True</Option>
           <Option name="classify_mark_terminating">False</Option>
-          <Option name="cmdline"></Option>
-          <Option name="compiler"></Option>
+          <Option name="cmdline"/>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="drop_invalid">True</Option>
           <Option name="dyn_addr">False</Option>
-          <Option name="epilog_script"></Option>
-          <Option name="firewall_dir"></Option>
+          <Option name="epilog_script"/>
+          <Option name="firewall_dir"/>
           <Option name="firewall_is_part_of_any">True</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
-          <Option name="id"></Option>
+          <Option name="id"/>
           <Option name="ignore_empty_groups">False</Option>
-          <Option name="install_script"></Option>
+          <Option name="install_script"/>
           <Option name="ipt_mangle_only_rulesets"> Policy_2 mangle_ruleset</Option>
           <Option name="ipv4_6_order">ipv4_first</Option>
           <Option name="limit_suffix">/day</Option>
           <Option name="limit_value">0</Option>
-          <Option name="linux24_accept_redirects"></Option>
-          <Option name="linux24_accept_source_route"></Option>
-          <Option name="linux24_icmp_echo_ignore_all"></Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
-          <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
-          <Option name="linux24_ip_dynaddr"></Option>
-          <Option name="linux24_ip_forward"></Option>
-          <Option name="linux24_log_martians"></Option>
-          <Option name="linux24_path_ip"></Option>
-          <Option name="linux24_path_iptables"></Option>
-          <Option name="linux24_path_logger"></Option>
-          <Option name="linux24_path_lsmod"></Option>
-          <Option name="linux24_path_modprobe"></Option>
-          <Option name="linux24_rp_filter"></Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_accept_redirects"/>
+          <Option name="linux24_accept_source_route"/>
+          <Option name="linux24_icmp_echo_ignore_all"/>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
+          <Option name="linux24_icmp_ignore_bogus_error_responses"/>
+          <Option name="linux24_ip_dynaddr"/>
+          <Option name="linux24_ip_forward"/>
+          <Option name="linux24_log_martians"/>
+          <Option name="linux24_path_ip"/>
+          <Option name="linux24_path_iptables"/>
+          <Option name="linux24_path_logger"/>
+          <Option name="linux24_path_lsmod"/>
+          <Option name="linux24_path_modprobe"/>
+          <Option name="linux24_rp_filter"/>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">30</Option>
           <Option name="linux24_tcp_keepalive_interval">1800</Option>
-          <Option name="linux24_tcp_sack"></Option>
-          <Option name="linux24_tcp_syncookies"></Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_sack"/>
+          <Option name="linux24_tcp_syncookies"/>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">False</Option>
           <Option name="local_nat">False</Option>
           <Option name="log_all">False</Option>
           <Option name="log_all_dropped">False</Option>
           <Option name="log_invalid">False</Option>
           <Option name="log_ip_opt">False</Option>
-          <Option name="log_level"></Option>
-          <Option name="log_limit_suffix"></Option>
+          <Option name="log_level"/>
+          <Option name="log_limit_suffix"/>
           <Option name="log_limit_value">0</Option>
-          <Option name="log_prefix"></Option>
+          <Option name="log_prefix"/>
           <Option name="log_tcp_opt">False</Option>
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">True</Option>
@@ -20554,15 +21310,15 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="no_iochains_for_any">False</Option>
           <Option name="no_ipv6_default_policy">False</Option>
           <Option name="no_optimisation">False</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="platform">iptables</Option>
           <Option name="prolog_place">top</Option>
-          <Option name="prolog_script"></Option>
-          <Option name="script_env_path"></Option>
-          <Option name="snmp_contact"></Option>
-          <Option name="snmp_description"></Option>
-          <Option name="snmp_location"></Option>
-          <Option name="sshArgs"></Option>
+          <Option name="prolog_script"/>
+          <Option name="script_env_path"/>
+          <Option name="snmp_contact"/>
+          <Option name="snmp_description"/>
+          <Option name="snmp_location"/>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -20593,6 +21349,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id418C469A" disabled="False" group="" position="1" action="Translate" comment="">
@@ -20614,6 +21373,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id418C46A8" disabled="False" group="" position="2" action="Translate" comment="">
@@ -20635,6 +21397,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="tcp-SSH"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id418C46B6" disabled="False" group="" position="3" action="Translate" comment="">
@@ -20656,6 +21421,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <RuleSetOptions/>
@@ -20798,7 +21566,7 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id418C4619" disabled="False" group="" log="False" position="7" action="Accept" direction="Both" comment="">
@@ -21002,11 +21770,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
-              <Option name="id"></Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="action_on_reject"/>
+              <Option name="id"/>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -21035,61 +21803,61 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">False</Option>
           <Option name="action_on_reject">ICMP host prohibited</Option>
-          <Option name="activationCmd"></Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="activationCmd"/>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">False</Option>
           <Option name="clamp_mss_to_mtu">True</Option>
           <Option name="classify_mark_terminating">False</Option>
-          <Option name="cmdline"></Option>
-          <Option name="compiler"></Option>
+          <Option name="cmdline"/>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="drop_invalid">True</Option>
           <Option name="dyn_addr">False</Option>
-          <Option name="epilog_script"></Option>
-          <Option name="firewall_dir"></Option>
+          <Option name="epilog_script"/>
+          <Option name="firewall_dir"/>
           <Option name="firewall_is_part_of_any">True</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
-          <Option name="id"></Option>
+          <Option name="id"/>
           <Option name="ignore_empty_groups">False</Option>
-          <Option name="install_script"></Option>
+          <Option name="install_script"/>
           <Option name="ipv4_6_order">ipv4_first</Option>
           <Option name="limit_suffix">/day</Option>
           <Option name="limit_value">0</Option>
-          <Option name="linux24_accept_redirects"></Option>
-          <Option name="linux24_accept_source_route"></Option>
-          <Option name="linux24_icmp_echo_ignore_all"></Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
-          <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
-          <Option name="linux24_ip_dynaddr"></Option>
-          <Option name="linux24_ip_forward"></Option>
-          <Option name="linux24_log_martians"></Option>
-          <Option name="linux24_path_ip"></Option>
-          <Option name="linux24_path_iptables"></Option>
-          <Option name="linux24_path_logger"></Option>
-          <Option name="linux24_path_lsmod"></Option>
-          <Option name="linux24_path_modprobe"></Option>
-          <Option name="linux24_rp_filter"></Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_accept_redirects"/>
+          <Option name="linux24_accept_source_route"/>
+          <Option name="linux24_icmp_echo_ignore_all"/>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
+          <Option name="linux24_icmp_ignore_bogus_error_responses"/>
+          <Option name="linux24_ip_dynaddr"/>
+          <Option name="linux24_ip_forward"/>
+          <Option name="linux24_log_martians"/>
+          <Option name="linux24_path_ip"/>
+          <Option name="linux24_path_iptables"/>
+          <Option name="linux24_path_logger"/>
+          <Option name="linux24_path_lsmod"/>
+          <Option name="linux24_path_modprobe"/>
+          <Option name="linux24_rp_filter"/>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">30</Option>
           <Option name="linux24_tcp_keepalive_interval">1800</Option>
-          <Option name="linux24_tcp_sack"></Option>
-          <Option name="linux24_tcp_syncookies"></Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_sack"/>
+          <Option name="linux24_tcp_syncookies"/>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">False</Option>
           <Option name="local_nat">False</Option>
           <Option name="log_all">False</Option>
           <Option name="log_all_dropped">False</Option>
           <Option name="log_invalid">False</Option>
           <Option name="log_ip_opt">False</Option>
-          <Option name="log_level"></Option>
-          <Option name="log_limit_suffix"></Option>
+          <Option name="log_level"/>
+          <Option name="log_limit_suffix"/>
           <Option name="log_limit_value">0</Option>
-          <Option name="log_prefix"></Option>
+          <Option name="log_prefix"/>
           <Option name="log_tcp_opt">False</Option>
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">True</Option>
@@ -21098,15 +21866,15 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="no_iochains_for_any">False</Option>
           <Option name="no_ipv6_default_policy">False</Option>
           <Option name="no_optimisation">False</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="platform">iptables</Option>
           <Option name="prolog_place">top</Option>
-          <Option name="prolog_script"></Option>
-          <Option name="script_env_path"></Option>
-          <Option name="snmp_contact"></Option>
-          <Option name="snmp_description"></Option>
-          <Option name="snmp_location"></Option>
-          <Option name="sshArgs"></Option>
+          <Option name="prolog_script"/>
+          <Option name="script_env_path"/>
+          <Option name="snmp_contact"/>
+          <Option name="snmp_description"/>
+          <Option name="snmp_location"/>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -21137,6 +21905,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id4183D0D2" disabled="False" group="" position="1" action="Translate" comment="">
@@ -21158,6 +21929,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id4183D0E0" disabled="False" group="" position="2" action="Translate" comment="">
@@ -21179,6 +21953,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="tcp-SSH"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id4183D0EE" disabled="False" group="" position="3" action="Translate" comment="">
@@ -21200,6 +21977,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <RuleSetOptions/>
@@ -21342,7 +22122,7 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id4183D051" disabled="False" group="" log="False" position="7" action="Accept" direction="Both" comment="">
@@ -21546,11 +22326,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
-              <Option name="id"></Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="action_on_reject"/>
+              <Option name="id"/>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -21580,61 +22360,61 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">False</Option>
           <Option name="action_on_reject">ICMP host prohibited</Option>
-          <Option name="activationCmd"></Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="activationCmd"/>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">False</Option>
           <Option name="clamp_mss_to_mtu">True</Option>
           <Option name="classify_mark_terminating">False</Option>
-          <Option name="cmdline"></Option>
-          <Option name="compiler"></Option>
+          <Option name="cmdline"/>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="drop_invalid">True</Option>
           <Option name="dyn_addr">False</Option>
-          <Option name="epilog_script"></Option>
-          <Option name="firewall_dir"></Option>
+          <Option name="epilog_script"/>
+          <Option name="firewall_dir"/>
           <Option name="firewall_is_part_of_any">True</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
-          <Option name="id"></Option>
+          <Option name="id"/>
           <Option name="ignore_empty_groups">False</Option>
-          <Option name="install_script"></Option>
+          <Option name="install_script"/>
           <Option name="ipv4_6_order">ipv4_first</Option>
           <Option name="limit_suffix">/day</Option>
           <Option name="limit_value">0</Option>
-          <Option name="linux24_accept_redirects"></Option>
-          <Option name="linux24_accept_source_route"></Option>
-          <Option name="linux24_icmp_echo_ignore_all"></Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
-          <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
-          <Option name="linux24_ip_dynaddr"></Option>
-          <Option name="linux24_ip_forward"></Option>
-          <Option name="linux24_log_martians"></Option>
-          <Option name="linux24_path_ip"></Option>
-          <Option name="linux24_path_iptables"></Option>
-          <Option name="linux24_path_logger"></Option>
-          <Option name="linux24_path_lsmod"></Option>
-          <Option name="linux24_path_modprobe"></Option>
-          <Option name="linux24_rp_filter"></Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_accept_redirects"/>
+          <Option name="linux24_accept_source_route"/>
+          <Option name="linux24_icmp_echo_ignore_all"/>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
+          <Option name="linux24_icmp_ignore_bogus_error_responses"/>
+          <Option name="linux24_ip_dynaddr"/>
+          <Option name="linux24_ip_forward"/>
+          <Option name="linux24_log_martians"/>
+          <Option name="linux24_path_ip"/>
+          <Option name="linux24_path_iptables"/>
+          <Option name="linux24_path_logger"/>
+          <Option name="linux24_path_lsmod"/>
+          <Option name="linux24_path_modprobe"/>
+          <Option name="linux24_rp_filter"/>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">30</Option>
           <Option name="linux24_tcp_keepalive_interval">1800</Option>
-          <Option name="linux24_tcp_sack"></Option>
-          <Option name="linux24_tcp_syncookies"></Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_sack"/>
+          <Option name="linux24_tcp_syncookies"/>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">False</Option>
           <Option name="local_nat">False</Option>
           <Option name="log_all">False</Option>
           <Option name="log_all_dropped">False</Option>
           <Option name="log_invalid">False</Option>
           <Option name="log_ip_opt">False</Option>
-          <Option name="log_level"></Option>
-          <Option name="log_limit_suffix"></Option>
+          <Option name="log_level"/>
+          <Option name="log_limit_suffix"/>
           <Option name="log_limit_value">0</Option>
-          <Option name="log_prefix"></Option>
+          <Option name="log_prefix"/>
           <Option name="log_tcp_opt">False</Option>
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">True</Option>
@@ -21643,15 +22423,15 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="no_iochains_for_any">False</Option>
           <Option name="no_ipv6_default_policy">False</Option>
           <Option name="no_optimisation">False</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="platform">iptables</Option>
           <Option name="prolog_place">top</Option>
-          <Option name="prolog_script"></Option>
-          <Option name="script_env_path"></Option>
-          <Option name="snmp_contact"></Option>
-          <Option name="snmp_description"></Option>
-          <Option name="snmp_location"></Option>
-          <Option name="sshArgs"></Option>
+          <Option name="prolog_script"/>
+          <Option name="script_env_path"/>
+          <Option name="snmp_contact"/>
+          <Option name="snmp_description"/>
+          <Option name="snmp_location"/>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -21682,6 +22462,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <RuleSetOptions/>
@@ -21785,45 +22568,45 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
           <Option name="action_on_reject">ICMP host prohibited</Option>
-          <Option name="activationCmd"></Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="activationCmd"/>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">True</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
-          <Option name="cmdline"></Option>
-          <Option name="compiler"></Option>
+          <Option name="cmdline"/>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="drop_invalid">False</Option>
-          <Option name="epilog_script"></Option>
-          <Option name="firewall_dir"></Option>
+          <Option name="epilog_script"/>
+          <Option name="firewall_dir"/>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="ignore_empty_groups">True</Option>
-          <Option name="limit_suffix"></Option>
+          <Option name="limit_suffix"/>
           <Option name="limit_value">0</Option>
-          <Option name="linux24_accept_redirects"></Option>
-          <Option name="linux24_accept_source_route"></Option>
-          <Option name="linux24_icmp_echo_ignore_all"></Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
-          <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
-          <Option name="linux24_ip_dynaddr"></Option>
-          <Option name="linux24_ip_forward"></Option>
-          <Option name="linux24_log_martians"></Option>
-          <Option name="linux24_path_ip"></Option>
-          <Option name="linux24_path_iptables"></Option>
-          <Option name="linux24_path_logger"></Option>
-          <Option name="linux24_path_lsmod"></Option>
-          <Option name="linux24_path_modprobe"></Option>
-          <Option name="linux24_rp_filter"></Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_accept_redirects"/>
+          <Option name="linux24_accept_source_route"/>
+          <Option name="linux24_icmp_echo_ignore_all"/>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
+          <Option name="linux24_icmp_ignore_bogus_error_responses"/>
+          <Option name="linux24_ip_dynaddr"/>
+          <Option name="linux24_ip_forward"/>
+          <Option name="linux24_log_martians"/>
+          <Option name="linux24_path_ip"/>
+          <Option name="linux24_path_iptables"/>
+          <Option name="linux24_path_logger"/>
+          <Option name="linux24_path_lsmod"/>
+          <Option name="linux24_path_modprobe"/>
+          <Option name="linux24_rp_filter"/>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">30</Option>
           <Option name="linux24_tcp_keepalive_interval">1800</Option>
-          <Option name="linux24_tcp_sack"></Option>
-          <Option name="linux24_tcp_syncookies"></Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_sack"/>
+          <Option name="linux24_tcp_syncookies"/>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">True</Option>
           <Option name="local_nat">False</Option>
           <Option name="log_all">False</Option>
@@ -21835,15 +22618,15 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="log_tcp_opt">False</Option>
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"></Option>
+          <Option name="mgmt_addr"/>
           <Option name="mgmt_ssh">False</Option>
           <Option name="no_optimisation">False</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="prolog_place">top</Option>
-          <Option name="prolog_script"></Option>
-          <Option name="snmp_contact"></Option>
-          <Option name="snmp_description"></Option>
-          <Option name="snmp_location"></Option>
+          <Option name="prolog_script"/>
+          <Option name="snmp_contact"/>
+          <Option name="snmp_description"/>
+          <Option name="snmp_location"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -21875,6 +22658,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <RuleSetOptions/>
@@ -21957,7 +22743,7 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="connlimit_above_not">False</Option>
               <Option name="connlimit_masklen">0</Option>
               <Option name="connlimit_value">10</Option>
-              <Option name="firewall_is_part_of_any_and_networks"></Option>
+              <Option name="firewall_is_part_of_any_and_networks"/>
               <Option name="hashlimit_burst">0</Option>
               <Option name="hashlimit_dstlimit">False</Option>
               <Option name="hashlimit_expire">0</Option>
@@ -21967,15 +22753,15 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">False</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -22000,7 +22786,7 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="connlimit_above_not">True</Option>
               <Option name="connlimit_masklen">0</Option>
               <Option name="connlimit_value">10</Option>
-              <Option name="firewall_is_part_of_any_and_networks"></Option>
+              <Option name="firewall_is_part_of_any_and_networks"/>
               <Option name="hashlimit_burst">0</Option>
               <Option name="hashlimit_dstlimit">False</Option>
               <Option name="hashlimit_expire">0</Option>
@@ -22010,15 +22796,15 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">False</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -22074,41 +22860,41 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">False</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
-          <Option name="cmdline"></Option>
-          <Option name="compiler"></Option>
+          <Option name="cmdline"/>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="dyn_addr">False</Option>
           <Option name="firewall_is_part_of_any">True</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="ignore_empty_groups">False</Option>
-          <Option name="inst_cmdline"></Option>
-          <Option name="inst_script"></Option>
-          <Option name="install_script"></Option>
+          <Option name="inst_cmdline"/>
+          <Option name="inst_script"/>
+          <Option name="install_script"/>
           <Option name="limit_suffix">/day</Option>
           <Option name="limit_value">0</Option>
-          <Option name="linux24_accept_redirects"></Option>
-          <Option name="linux24_accept_source_route"></Option>
-          <Option name="linux24_icmp_echo_ignore_all"></Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
-          <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
-          <Option name="linux24_ip_dynaddr"></Option>
-          <Option name="linux24_ip_forward"></Option>
-          <Option name="linux24_log_martians"></Option>
-          <Option name="linux24_path_ip"></Option>
-          <Option name="linux24_path_iptables"></Option>
-          <Option name="linux24_path_logger"></Option>
-          <Option name="linux24_path_lsmod"></Option>
-          <Option name="linux24_path_modprobe"></Option>
-          <Option name="linux24_rp_filter"></Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_accept_redirects"/>
+          <Option name="linux24_accept_source_route"/>
+          <Option name="linux24_icmp_echo_ignore_all"/>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
+          <Option name="linux24_icmp_ignore_bogus_error_responses"/>
+          <Option name="linux24_ip_dynaddr"/>
+          <Option name="linux24_ip_forward"/>
+          <Option name="linux24_log_martians"/>
+          <Option name="linux24_path_ip"/>
+          <Option name="linux24_path_iptables"/>
+          <Option name="linux24_path_logger"/>
+          <Option name="linux24_path_lsmod"/>
+          <Option name="linux24_path_modprobe"/>
+          <Option name="linux24_rp_filter"/>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">30</Option>
           <Option name="linux24_tcp_keepalive_interval">1800</Option>
-          <Option name="linux24_tcp_sack"></Option>
-          <Option name="linux24_tcp_syncookies"></Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_sack"/>
+          <Option name="linux24_tcp_syncookies"/>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">False</Option>
           <Option name="local_nat">False</Option>
           <Option name="log_all">False</Option>
@@ -22125,10 +22911,10 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="no_optimisation">False</Option>
           <Option name="platform">iptables</Option>
           <Option name="proxy_arp">False</Option>
-          <Option name="script_env_path"></Option>
-          <Option name="snmp_contact"></Option>
-          <Option name="snmp_description"></Option>
-          <Option name="snmp_location"></Option>
+          <Option name="script_env_path"/>
+          <Option name="snmp_contact"/>
+          <Option name="snmp_description"/>
+          <Option name="snmp_location"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -22228,41 +23014,41 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">True</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
-          <Option name="cmdline"></Option>
-          <Option name="compiler"></Option>
+          <Option name="cmdline"/>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="dyn_addr">False</Option>
           <Option name="firewall_is_part_of_any">True</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="ignore_empty_groups">False</Option>
-          <Option name="inst_cmdline"></Option>
-          <Option name="inst_script"></Option>
-          <Option name="install_script"></Option>
+          <Option name="inst_cmdline"/>
+          <Option name="inst_script"/>
+          <Option name="install_script"/>
           <Option name="limit_suffix">/day</Option>
           <Option name="limit_value">0</Option>
-          <Option name="linux24_accept_redirects"></Option>
-          <Option name="linux24_accept_source_route"></Option>
-          <Option name="linux24_icmp_echo_ignore_all"></Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
-          <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
-          <Option name="linux24_ip_dynaddr"></Option>
-          <Option name="linux24_ip_forward"></Option>
-          <Option name="linux24_log_martians"></Option>
-          <Option name="linux24_path_ip"></Option>
-          <Option name="linux24_path_iptables"></Option>
-          <Option name="linux24_path_logger"></Option>
-          <Option name="linux24_path_lsmod"></Option>
-          <Option name="linux24_path_modprobe"></Option>
-          <Option name="linux24_rp_filter"></Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_accept_redirects"/>
+          <Option name="linux24_accept_source_route"/>
+          <Option name="linux24_icmp_echo_ignore_all"/>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
+          <Option name="linux24_icmp_ignore_bogus_error_responses"/>
+          <Option name="linux24_ip_dynaddr"/>
+          <Option name="linux24_ip_forward"/>
+          <Option name="linux24_log_martians"/>
+          <Option name="linux24_path_ip"/>
+          <Option name="linux24_path_iptables"/>
+          <Option name="linux24_path_logger"/>
+          <Option name="linux24_path_lsmod"/>
+          <Option name="linux24_path_modprobe"/>
+          <Option name="linux24_rp_filter"/>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">30</Option>
           <Option name="linux24_tcp_keepalive_interval">1800</Option>
-          <Option name="linux24_tcp_sack"></Option>
-          <Option name="linux24_tcp_syncookies"></Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_sack"/>
+          <Option name="linux24_tcp_syncookies"/>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">False</Option>
           <Option name="local_nat">False</Option>
           <Option name="log_all">False</Option>
@@ -22279,10 +23065,10 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="no_optimisation">False</Option>
           <Option name="platform">iptables</Option>
           <Option name="proxy_arp">False</Option>
-          <Option name="script_env_path"></Option>
-          <Option name="snmp_contact"></Option>
-          <Option name="snmp_description"></Option>
-          <Option name="snmp_location"></Option>
+          <Option name="script_env_path"/>
+          <Option name="snmp_contact"/>
+          <Option name="snmp_description"/>
+          <Option name="snmp_location"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -22453,46 +23239,46 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
           <Option name="action_on_reject">ICMP host prohibited</Option>
-          <Option name="activationCmd"></Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="activationCmd"/>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">False</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
-          <Option name="cmdline"></Option>
-          <Option name="compiler"></Option>
+          <Option name="cmdline"/>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="drop_invalid">False</Option>
           <Option name="dyn_addr">False</Option>
-          <Option name="epilog_script"></Option>
-          <Option name="firewall_dir"></Option>
+          <Option name="epilog_script"/>
+          <Option name="firewall_dir"/>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="ignore_empty_groups">False</Option>
           <Option name="limit_suffix">/day</Option>
           <Option name="limit_value">0</Option>
-          <Option name="linux24_accept_redirects"></Option>
-          <Option name="linux24_accept_source_route"></Option>
-          <Option name="linux24_icmp_echo_ignore_all"></Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
-          <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
-          <Option name="linux24_ip_dynaddr"></Option>
-          <Option name="linux24_ip_forward"></Option>
-          <Option name="linux24_log_martians"></Option>
-          <Option name="linux24_path_ip"></Option>
-          <Option name="linux24_path_iptables"></Option>
-          <Option name="linux24_path_logger"></Option>
-          <Option name="linux24_path_lsmod"></Option>
-          <Option name="linux24_path_modprobe"></Option>
-          <Option name="linux24_rp_filter"></Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_accept_redirects"/>
+          <Option name="linux24_accept_source_route"/>
+          <Option name="linux24_icmp_echo_ignore_all"/>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
+          <Option name="linux24_icmp_ignore_bogus_error_responses"/>
+          <Option name="linux24_ip_dynaddr"/>
+          <Option name="linux24_ip_forward"/>
+          <Option name="linux24_log_martians"/>
+          <Option name="linux24_path_ip"/>
+          <Option name="linux24_path_iptables"/>
+          <Option name="linux24_path_logger"/>
+          <Option name="linux24_path_lsmod"/>
+          <Option name="linux24_path_modprobe"/>
+          <Option name="linux24_rp_filter"/>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">30</Option>
           <Option name="linux24_tcp_keepalive_interval">1800</Option>
-          <Option name="linux24_tcp_sack"></Option>
-          <Option name="linux24_tcp_syncookies"></Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_sack"/>
+          <Option name="linux24_tcp_syncookies"/>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">True</Option>
           <Option name="local_nat">False</Option>
           <Option name="log_all">False</Option>
@@ -22504,17 +23290,17 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="log_tcp_opt">False</Option>
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"></Option>
+          <Option name="mgmt_addr"/>
           <Option name="mgmt_ssh">False</Option>
           <Option name="no_optimisation">False</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="prolog_place">top</Option>
-          <Option name="prolog_script"></Option>
-          <Option name="script_env_path"></Option>
-          <Option name="snmp_contact"></Option>
-          <Option name="snmp_description"></Option>
-          <Option name="snmp_location"></Option>
-          <Option name="sshArgs"></Option>
+          <Option name="prolog_script"/>
+          <Option name="script_env_path"/>
+          <Option name="snmp_contact"/>
+          <Option name="snmp_description"/>
+          <Option name="snmp_location"/>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -22545,6 +23331,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <RuleSetOptions/>
@@ -22652,50 +23441,50 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
           <Option name="action_on_reject">ICMP net unreachable</Option>
-          <Option name="activationCmd"></Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="activationCmd"/>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">False</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
-          <Option name="cmdline"></Option>
-          <Option name="compiler"></Option>
+          <Option name="cmdline"/>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="drop_invalid">False</Option>
           <Option name="dyn_addr">False</Option>
-          <Option name="epilog_script"></Option>
-          <Option name="firewall_dir"></Option>
+          <Option name="epilog_script"/>
+          <Option name="firewall_dir"/>
           <Option name="firewall_is_part_of_any">True</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="ignore_empty_groups">False</Option>
-          <Option name="inst_cmdline"></Option>
-          <Option name="inst_script"></Option>
-          <Option name="install_script"></Option>
+          <Option name="inst_cmdline"/>
+          <Option name="inst_script"/>
+          <Option name="install_script"/>
           <Option name="limit_suffix">/day</Option>
           <Option name="limit_value">0</Option>
-          <Option name="linux24_accept_redirects"></Option>
-          <Option name="linux24_accept_source_route"></Option>
-          <Option name="linux24_icmp_echo_ignore_all"></Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
-          <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
-          <Option name="linux24_ip_dynaddr"></Option>
-          <Option name="linux24_ip_forward"></Option>
-          <Option name="linux24_log_martians"></Option>
-          <Option name="linux24_path_ip"></Option>
-          <Option name="linux24_path_iptables"></Option>
-          <Option name="linux24_path_logger"></Option>
-          <Option name="linux24_path_lsmod"></Option>
-          <Option name="linux24_path_modprobe"></Option>
-          <Option name="linux24_rp_filter"></Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_accept_redirects"/>
+          <Option name="linux24_accept_source_route"/>
+          <Option name="linux24_icmp_echo_ignore_all"/>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
+          <Option name="linux24_icmp_ignore_bogus_error_responses"/>
+          <Option name="linux24_ip_dynaddr"/>
+          <Option name="linux24_ip_forward"/>
+          <Option name="linux24_log_martians"/>
+          <Option name="linux24_path_ip"/>
+          <Option name="linux24_path_iptables"/>
+          <Option name="linux24_path_logger"/>
+          <Option name="linux24_path_lsmod"/>
+          <Option name="linux24_path_modprobe"/>
+          <Option name="linux24_rp_filter"/>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">30</Option>
           <Option name="linux24_tcp_keepalive_interval">1800</Option>
-          <Option name="linux24_tcp_sack"></Option>
-          <Option name="linux24_tcp_syncookies"></Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_sack"/>
+          <Option name="linux24_tcp_syncookies"/>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">False</Option>
           <Option name="local_nat">False</Option>
           <Option name="log_all">False</Option>
@@ -22709,20 +23498,20 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="log_tcp_opt">False</Option>
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"></Option>
+          <Option name="mgmt_addr"/>
           <Option name="mgmt_ssh">False</Option>
           <Option name="no_iochains_for_any">False</Option>
           <Option name="no_optimisation">False</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="platform">iptables</Option>
           <Option name="prolog_place">top</Option>
-          <Option name="prolog_script"></Option>
+          <Option name="prolog_script"/>
           <Option name="proxy_arp">False</Option>
-          <Option name="script_env_path"></Option>
-          <Option name="snmp_contact"></Option>
-          <Option name="snmp_description"></Option>
-          <Option name="snmp_location"></Option>
-          <Option name="sshArgs"></Option>
+          <Option name="script_env_path"/>
+          <Option name="snmp_contact"/>
+          <Option name="snmp_description"/>
+          <Option name="snmp_location"/>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -22754,6 +23543,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id43876E2618346" disabled="False" group="" position="1" action="Translate" comment="">
@@ -22775,6 +23567,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id43876E5218346" disabled="False" group="" position="2" action="Translate" comment="">
@@ -22796,6 +23591,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id43876E6918346" disabled="False" group="" position="3" action="Translate" comment="">
@@ -22818,6 +23616,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id43876E7B18346" disabled="False" group="" position="4" action="Translate" comment="">
@@ -22840,6 +23641,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <RuleSetOptions/>
@@ -23136,50 +23940,50 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
           <Option name="action_on_reject">ICMP net unreachable</Option>
-          <Option name="activationCmd"></Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="activationCmd"/>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">False</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
-          <Option name="cmdline"></Option>
-          <Option name="compiler"></Option>
+          <Option name="cmdline"/>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="drop_invalid">False</Option>
           <Option name="dyn_addr">False</Option>
-          <Option name="epilog_script"></Option>
-          <Option name="firewall_dir"></Option>
+          <Option name="epilog_script"/>
+          <Option name="firewall_dir"/>
           <Option name="firewall_is_part_of_any">True</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="ignore_empty_groups">False</Option>
-          <Option name="inst_cmdline"></Option>
-          <Option name="inst_script"></Option>
-          <Option name="install_script"></Option>
+          <Option name="inst_cmdline"/>
+          <Option name="inst_script"/>
+          <Option name="install_script"/>
           <Option name="limit_suffix">/day</Option>
           <Option name="limit_value">0</Option>
-          <Option name="linux24_accept_redirects"></Option>
-          <Option name="linux24_accept_source_route"></Option>
-          <Option name="linux24_icmp_echo_ignore_all"></Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
-          <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
-          <Option name="linux24_ip_dynaddr"></Option>
-          <Option name="linux24_ip_forward"></Option>
-          <Option name="linux24_log_martians"></Option>
-          <Option name="linux24_path_ip"></Option>
-          <Option name="linux24_path_iptables"></Option>
-          <Option name="linux24_path_logger"></Option>
-          <Option name="linux24_path_lsmod"></Option>
-          <Option name="linux24_path_modprobe"></Option>
-          <Option name="linux24_rp_filter"></Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_accept_redirects"/>
+          <Option name="linux24_accept_source_route"/>
+          <Option name="linux24_icmp_echo_ignore_all"/>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
+          <Option name="linux24_icmp_ignore_bogus_error_responses"/>
+          <Option name="linux24_ip_dynaddr"/>
+          <Option name="linux24_ip_forward"/>
+          <Option name="linux24_log_martians"/>
+          <Option name="linux24_path_ip"/>
+          <Option name="linux24_path_iptables"/>
+          <Option name="linux24_path_logger"/>
+          <Option name="linux24_path_lsmod"/>
+          <Option name="linux24_path_modprobe"/>
+          <Option name="linux24_rp_filter"/>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">30</Option>
           <Option name="linux24_tcp_keepalive_interval">1800</Option>
-          <Option name="linux24_tcp_sack"></Option>
-          <Option name="linux24_tcp_syncookies"></Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_sack"/>
+          <Option name="linux24_tcp_syncookies"/>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">False</Option>
           <Option name="local_nat">False</Option>
           <Option name="log_all">False</Option>
@@ -23193,20 +23997,20 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="log_tcp_opt">False</Option>
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"></Option>
+          <Option name="mgmt_addr"/>
           <Option name="mgmt_ssh">False</Option>
           <Option name="no_iochains_for_any">False</Option>
           <Option name="no_optimisation">False</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="platform">iptables</Option>
           <Option name="prolog_place">top</Option>
-          <Option name="prolog_script"></Option>
+          <Option name="prolog_script"/>
           <Option name="proxy_arp">False</Option>
-          <Option name="script_env_path"></Option>
-          <Option name="snmp_contact"></Option>
-          <Option name="snmp_description"></Option>
-          <Option name="snmp_location"></Option>
-          <Option name="sshArgs"></Option>
+          <Option name="script_env_path"/>
+          <Option name="snmp_contact"/>
+          <Option name="snmp_description"/>
+          <Option name="snmp_location"/>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -23238,6 +24042,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id43891B6E674" disabled="False" group="" position="1" action="Translate" comment="">
@@ -23259,6 +24066,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <RuleSetOptions/>
@@ -23283,17 +24093,17 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <PolicyRuleOptions>
               <Option name="connlimit_masklen">0</Option>
               <Option name="connlimit_value">0</Option>
-              <Option name="firewall_is_part_of_any_and_networks"></Option>
+              <Option name="firewall_is_part_of_any_and_networks"/>
               <Option name="hashlimit_burst">0</Option>
               <Option name="hashlimit_dstlimit">False</Option>
               <Option name="hashlimit_mode">dstip</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">False</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -23574,17 +24384,17 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <PolicyRuleOptions>
               <Option name="connlimit_masklen">0</Option>
               <Option name="connlimit_value">2</Option>
-              <Option name="firewall_is_part_of_any_and_networks"></Option>
+              <Option name="firewall_is_part_of_any_and_networks"/>
               <Option name="hashlimit_burst">0</Option>
               <Option name="hashlimit_dstlimit">False</Option>
               <Option name="hashlimit_mode">dstip</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">False</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -23635,13 +24445,13 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="hashlimit_burst">0</Option>
               <Option name="hashlimit_dstlimit">False</Option>
               <Option name="hashlimit_mode">dstip</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">False</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -23691,50 +24501,50 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
           <Option name="action_on_reject">ICMP net unreachable</Option>
-          <Option name="activationCmd"></Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="activationCmd"/>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">False</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
-          <Option name="cmdline"></Option>
-          <Option name="compiler"></Option>
+          <Option name="cmdline"/>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="drop_invalid">False</Option>
           <Option name="dyn_addr">False</Option>
-          <Option name="epilog_script"></Option>
-          <Option name="firewall_dir"></Option>
+          <Option name="epilog_script"/>
+          <Option name="firewall_dir"/>
           <Option name="firewall_is_part_of_any">True</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="ignore_empty_groups">True</Option>
-          <Option name="inst_cmdline"></Option>
-          <Option name="inst_script"></Option>
-          <Option name="install_script"></Option>
+          <Option name="inst_cmdline"/>
+          <Option name="inst_script"/>
+          <Option name="install_script"/>
           <Option name="limit_suffix">/day</Option>
           <Option name="limit_value">0</Option>
-          <Option name="linux24_accept_redirects"></Option>
-          <Option name="linux24_accept_source_route"></Option>
-          <Option name="linux24_icmp_echo_ignore_all"></Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
-          <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
-          <Option name="linux24_ip_dynaddr"></Option>
-          <Option name="linux24_ip_forward"></Option>
-          <Option name="linux24_log_martians"></Option>
-          <Option name="linux24_path_ip"></Option>
-          <Option name="linux24_path_iptables"></Option>
-          <Option name="linux24_path_logger"></Option>
-          <Option name="linux24_path_lsmod"></Option>
-          <Option name="linux24_path_modprobe"></Option>
-          <Option name="linux24_rp_filter"></Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_accept_redirects"/>
+          <Option name="linux24_accept_source_route"/>
+          <Option name="linux24_icmp_echo_ignore_all"/>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
+          <Option name="linux24_icmp_ignore_bogus_error_responses"/>
+          <Option name="linux24_ip_dynaddr"/>
+          <Option name="linux24_ip_forward"/>
+          <Option name="linux24_log_martians"/>
+          <Option name="linux24_path_ip"/>
+          <Option name="linux24_path_iptables"/>
+          <Option name="linux24_path_logger"/>
+          <Option name="linux24_path_lsmod"/>
+          <Option name="linux24_path_modprobe"/>
+          <Option name="linux24_rp_filter"/>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">30</Option>
           <Option name="linux24_tcp_keepalive_interval">1800</Option>
-          <Option name="linux24_tcp_sack"></Option>
-          <Option name="linux24_tcp_syncookies"></Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_sack"/>
+          <Option name="linux24_tcp_syncookies"/>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">False</Option>
           <Option name="local_nat">False</Option>
           <Option name="log_all">False</Option>
@@ -23748,20 +24558,20 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="log_tcp_opt">False</Option>
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"></Option>
+          <Option name="mgmt_addr"/>
           <Option name="mgmt_ssh">False</Option>
           <Option name="no_iochains_for_any">False</Option>
           <Option name="no_optimisation">False</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="platform">iptables</Option>
           <Option name="prolog_place">top</Option>
-          <Option name="prolog_script"></Option>
+          <Option name="prolog_script"/>
           <Option name="proxy_arp">False</Option>
-          <Option name="script_env_path"></Option>
-          <Option name="snmp_contact"></Option>
-          <Option name="snmp_description"></Option>
-          <Option name="snmp_location"></Option>
-          <Option name="sshArgs"></Option>
+          <Option name="script_env_path"/>
+          <Option name="snmp_contact"/>
+          <Option name="snmp_description"/>
+          <Option name="snmp_location"/>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -23793,6 +24603,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id4392559D25682" disabled="False" group="" position="1" action="Translate" comment="">
@@ -23814,6 +24627,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <RuleSetOptions/>
@@ -23936,14 +24752,14 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="branch_id">id55450X84465</Option>
-              <Option name="classify_str"></Option>
+              <Option name="classify_str"/>
               <Option name="connlimit_above_not">False</Option>
               <Option name="connlimit_masklen">0</Option>
               <Option name="connlimit_value">0</Option>
-              <Option name="custom_str"></Option>
-              <Option name="firewall_is_part_of_any_and_networks"></Option>
+              <Option name="custom_str"/>
+              <Option name="firewall_is_part_of_any_and_networks"/>
               <Option name="hashlimit_burst">0</Option>
               <Option name="hashlimit_dstlimit">False</Option>
               <Option name="hashlimit_expire">0</Option>
@@ -23953,35 +24769,35 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_branch_in_mangle">False</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="limit_value_not">False</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">none</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -24183,53 +24999,53 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
           <Option name="action_on_reject">ICMP net unreachable</Option>
-          <Option name="activationCmd"></Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="activationCmd"/>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">False</Option>
           <Option name="clamp_mss_to_mtu">True</Option>
           <Option name="classify_mark_terminating">False</Option>
-          <Option name="cmdline"></Option>
-          <Option name="compiler"></Option>
+          <Option name="cmdline"/>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="drop_invalid">False</Option>
           <Option name="dyn_addr">False</Option>
           <Option name="enable_ipv6">False</Option>
-          <Option name="epilog_script"></Option>
-          <Option name="firewall_dir"></Option>
+          <Option name="epilog_script"/>
+          <Option name="firewall_dir"/>
           <Option name="firewall_is_part_of_any">True</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="ignore_empty_groups">False</Option>
-          <Option name="inst_cmdline"></Option>
-          <Option name="inst_script"></Option>
-          <Option name="install_script"></Option>
+          <Option name="inst_cmdline"/>
+          <Option name="inst_script"/>
+          <Option name="install_script"/>
           <Option name="ipv4_6_order">ipv4_first</Option>
           <Option name="limit_suffix">/day</Option>
           <Option name="limit_value">0</Option>
-          <Option name="linux24_accept_redirects"></Option>
-          <Option name="linux24_accept_source_route"></Option>
-          <Option name="linux24_icmp_echo_ignore_all"></Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
-          <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
-          <Option name="linux24_ip_dynaddr"></Option>
-          <Option name="linux24_ip_forward"></Option>
-          <Option name="linux24_log_martians"></Option>
-          <Option name="linux24_path_ip"></Option>
-          <Option name="linux24_path_iptables"></Option>
-          <Option name="linux24_path_logger"></Option>
-          <Option name="linux24_path_lsmod"></Option>
-          <Option name="linux24_path_modprobe"></Option>
-          <Option name="linux24_rp_filter"></Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_accept_redirects"/>
+          <Option name="linux24_accept_source_route"/>
+          <Option name="linux24_icmp_echo_ignore_all"/>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
+          <Option name="linux24_icmp_ignore_bogus_error_responses"/>
+          <Option name="linux24_ip_dynaddr"/>
+          <Option name="linux24_ip_forward"/>
+          <Option name="linux24_log_martians"/>
+          <Option name="linux24_path_ip"/>
+          <Option name="linux24_path_iptables"/>
+          <Option name="linux24_path_logger"/>
+          <Option name="linux24_path_lsmod"/>
+          <Option name="linux24_path_modprobe"/>
+          <Option name="linux24_rp_filter"/>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">30</Option>
           <Option name="linux24_tcp_keepalive_interval">1800</Option>
-          <Option name="linux24_tcp_sack"></Option>
-          <Option name="linux24_tcp_syncookies"></Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_sack"/>
+          <Option name="linux24_tcp_syncookies"/>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">False</Option>
           <Option name="local_nat">False</Option>
           <Option name="log_all">False</Option>
@@ -24243,22 +25059,22 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="log_tcp_opt">False</Option>
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"></Option>
+          <Option name="mgmt_addr"/>
           <Option name="mgmt_ssh">False</Option>
           <Option name="no_iochains_for_any">False</Option>
           <Option name="no_ipv6_default_policy">False</Option>
           <Option name="no_optimisation">False</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="platform">iptables</Option>
           <Option name="prolog_place">top</Option>
-          <Option name="prolog_script"></Option>
+          <Option name="prolog_script"/>
           <Option name="proxy_arp">False</Option>
-          <Option name="scpArgs"></Option>
-          <Option name="script_env_path"></Option>
-          <Option name="snmp_contact"></Option>
-          <Option name="snmp_description"></Option>
-          <Option name="snmp_location"></Option>
-          <Option name="sshArgs"></Option>
+          <Option name="scpArgs"/>
+          <Option name="script_env_path"/>
+          <Option name="snmp_contact"/>
+          <Option name="snmp_description"/>
+          <Option name="snmp_location"/>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -24309,28 +25125,28 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
-              <Option name="branch_anchor_name"></Option>
-              <Option name="branch_chain_name"></Option>
-              <Option name="classify_str"></Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="action_on_reject"/>
+              <Option name="branch_anchor_name"/>
+              <Option name="branch_chain_name"/>
+              <Option name="classify_str"/>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">Route through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
               <Option name="ipt_oif">eth1</Option>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">Route through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -24351,28 +25167,28 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
-              <Option name="branch_anchor_name"></Option>
-              <Option name="branch_chain_name"></Option>
-              <Option name="classify_str"></Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="action_on_reject"/>
+              <Option name="branch_anchor_name"/>
+              <Option name="branch_chain_name"/>
+              <Option name="classify_str"/>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">Route through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">True</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
               <Option name="ipt_oif">eth1</Option>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">Route through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -24393,28 +25209,28 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
-              <Option name="branch_anchor_name"></Option>
-              <Option name="branch_chain_name"></Option>
-              <Option name="classify_str"></Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="action_on_reject"/>
+              <Option name="branch_anchor_name"/>
+              <Option name="branch_chain_name"/>
+              <Option name="classify_str"/>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">Route through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">True</Option>
               <Option name="ipt_gw">1.2.3.4</Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">Route through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -24435,28 +25251,28 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
-              <Option name="branch_anchor_name"></Option>
-              <Option name="branch_chain_name"></Option>
-              <Option name="classify_str"></Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="action_on_reject"/>
+              <Option name="branch_anchor_name"/>
+              <Option name="branch_chain_name"/>
+              <Option name="classify_str"/>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">Route through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
+              <Option name="ipt_gw"/>
               <Option name="ipt_iif">eth1</Option>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">Route through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -24477,28 +25293,28 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
-              <Option name="branch_anchor_name"></Option>
-              <Option name="branch_chain_name"></Option>
-              <Option name="classify_str"></Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="action_on_reject"/>
+              <Option name="branch_anchor_name"/>
+              <Option name="branch_chain_name"/>
+              <Option name="classify_str"/>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">Route through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
               <Option name="ipt_gw">1.2.3.4</Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">True</Option>
               <Option name="pf_fastroute">False</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">Route through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -24599,26 +25415,26 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
         <FirewallOptions>
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
-          <Option name="action_on_reject"></Option>
-          <Option name="activationCmd"></Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="action_on_reject"/>
+          <Option name="activationCmd"/>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">True</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
-          <Option name="cmdline"></Option>
-          <Option name="compiler"></Option>
+          <Option name="cmdline"/>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="drop_invalid">False</Option>
           <Option name="eliminate_duplicates">true</Option>
-          <Option name="epilog_script"></Option>
+          <Option name="epilog_script"/>
           <Option name="firewall_dir">/etc</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="freebsd_ip_forward">1</Option>
           <Option name="ignore_empty_groups">False</Option>
           <Option name="in_out_code">true</Option>
-          <Option name="limit_suffix"></Option>
+          <Option name="limit_suffix"/>
           <Option name="limit_value">0</Option>
           <Option name="linux24_ip_forward">1</Option>
           <Option name="load_modules">True</Option>
@@ -24633,10 +25449,10 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="loopback_interface">lo0</Option>
           <Option name="macosx_ip_forward">1</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"></Option>
+          <Option name="mgmt_addr"/>
           <Option name="mgmt_ssh">False</Option>
           <Option name="openbsd_ip_forward">1</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="pass_all_out">false</Option>
           <Option name="pf_limit_frags">5000</Option>
           <Option name="pf_limit_states">10000</Option>
@@ -24656,11 +25472,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="pix_syslog_device_id_supported">false</Option>
           <Option name="pix_use_acl_remarks">true</Option>
           <Option name="prolog_place">top</Option>
-          <Option name="prolog_script"></Option>
+          <Option name="prolog_script"/>
           <Option name="prompt1">$ </Option>
           <Option name="prompt2"> # </Option>
           <Option name="solaris_ip_forward">1</Option>
-          <Option name="sshArgs"></Option>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -24692,6 +25508,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <RuleSetOptions/>
@@ -24714,9 +25533,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="color">#8BC065</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="tagobject_id">id43EC877332486</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -24737,9 +25556,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="color">#8BC065</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="tagobject_id">id43EC877332486</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -24760,9 +25579,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="color">#8BC065</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="tagobject_id">id43EC877332486</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -24783,9 +25602,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="color">#8BC065</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="tagobject_id">id43EC877332486</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -24806,9 +25625,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="color">#8BC065</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="tagobject_id">id43EC877332486</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -24829,9 +25648,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="color">#C0BA44</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="tagobject_id">id43EC877332486</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -24852,9 +25671,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="color">#C0BA44</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="tagobject_id">id43EC877332486</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -24875,9 +25694,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="color">#C0BA44</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="tagobject_id">id43EC877332486</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -24898,7 +25717,7 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="color">#C0BA44</Option>
               <Option name="connlimit_masklen">0</Option>
               <Option name="connlimit_value">0</Option>
@@ -24912,16 +25731,16 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
               <Option name="tagobject_id">id43EC877332486</Option>
               <Option name="ulog_nlgroup">1</Option>
@@ -24944,7 +25763,7 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="color">#C0BA44</Option>
               <Option name="connlimit_masklen">0</Option>
               <Option name="connlimit_value">0</Option>
@@ -24958,16 +25777,16 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
               <Option name="tagobject_id">id43EC877332486</Option>
               <Option name="ulog_nlgroup">1</Option>
@@ -24990,7 +25809,7 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="color">#C0BA44</Option>
               <Option name="connlimit_masklen">0</Option>
               <Option name="connlimit_value">0</Option>
@@ -25004,16 +25823,16 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
               <Option name="tagobject_id">id43EC877332486</Option>
               <Option name="ulog_nlgroup">1</Option>
@@ -25037,9 +25856,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="color">#8BC065</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="tagobject_id">id43EC877332486</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -25060,9 +25879,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="color">#8BC065</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="tagobject_id">id43EC877332486</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -25083,9 +25902,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="color">#8BC065</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="tagobject_id">id43EC877332486</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -25106,9 +25925,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="color">#8BC065</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="tagobject_id">id43EC877332486</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -25129,15 +25948,15 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
-              <Option name="classify_str"></Option>
+              <Option name="action_on_reject"/>
+              <Option name="classify_str"/>
               <Option name="color">#C08B5A</Option>
-              <Option name="custom_str"></Option>
+              <Option name="custom_str"/>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_mark_connections">True</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="tagobject_id">id342984</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -25158,15 +25977,15 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
-              <Option name="classify_str"></Option>
+              <Option name="action_on_reject"/>
+              <Option name="classify_str"/>
               <Option name="color">#C08B5A</Option>
-              <Option name="custom_str"></Option>
+              <Option name="custom_str"/>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_mark_connections">True</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="tagobject_id">id342984</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -25188,15 +26007,15 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
-              <Option name="classify_str"></Option>
+              <Option name="action_on_reject"/>
+              <Option name="classify_str"/>
               <Option name="color">#C08B5A</Option>
-              <Option name="custom_str"></Option>
+              <Option name="custom_str"/>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_mark_connections">True</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="tagobject_id">id342984</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -25217,15 +26036,15 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
-              <Option name="classify_str"></Option>
+              <Option name="action_on_reject"/>
+              <Option name="classify_str"/>
               <Option name="color">#C08B5A</Option>
-              <Option name="custom_str"></Option>
+              <Option name="custom_str"/>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_mark_connections">True</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="tagobject_id">id342984</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -25246,15 +26065,15 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
-              <Option name="classify_str"></Option>
+              <Option name="action_on_reject"/>
+              <Option name="classify_str"/>
               <Option name="color">#C08B5A</Option>
-              <Option name="custom_str"></Option>
+              <Option name="custom_str"/>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_mark_connections">True</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="tagobject_id">id342984</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -25275,28 +26094,28 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
-              <Option name="classify_str"></Option>
+              <Option name="action_on_reject"/>
+              <Option name="classify_str"/>
               <Option name="color">#C86E6E</Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_reply_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_reply_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">False</Option>
               <Option name="tagobject_id">id37422X26379</Option>
             </PolicyRuleOptions>
@@ -25338,7 +26157,7 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="classify_str">1:2</Option>
               <Option name="color">#7694C0</Option>
               <Option name="custom_str">-j TCPMSS --set-mss 1400</Option>
@@ -25346,13 +26165,13 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="ipfw_pipe_method">0</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
-              <Option name="tagvalue"></Option>
+              <Option name="tagvalue"/>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -25373,7 +26192,7 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="classify_str">1:2</Option>
               <Option name="color">#7694C0</Option>
               <Option name="custom_str">-j TCPMSS --set-mss 1400</Option>
@@ -25381,13 +26200,13 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="ipfw_pipe_method">0</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
-              <Option name="tagvalue"></Option>
+              <Option name="tagvalue"/>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -25409,7 +26228,7 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="classify_str">1:2</Option>
               <Option name="color">#7694C0</Option>
               <Option name="custom_str">-j TCPMSS --set-mss 1400</Option>
@@ -25417,13 +26236,13 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="ipfw_pipe_method">0</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
-              <Option name="tagvalue"></Option>
+              <Option name="tagvalue"/>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -25445,7 +26264,7 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="classify_str">1:2</Option>
               <Option name="color">#7694C0</Option>
               <Option name="custom_str">-j TCPMSS --set-mss 1400</Option>
@@ -25453,13 +26272,13 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="ipfw_pipe_method">0</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
-              <Option name="tagvalue"></Option>
+              <Option name="tagvalue"/>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -25480,7 +26299,7 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="classify_str">1:2</Option>
               <Option name="color">#7694C0</Option>
               <Option name="custom_str">-j TCPMSS --set-mss 1400</Option>
@@ -25488,13 +26307,13 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="ipfw_pipe_method">0</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
-              <Option name="tagvalue"></Option>
+              <Option name="tagvalue"/>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -25515,7 +26334,7 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="classify_str">1:2</Option>
               <Option name="color">#7694C0</Option>
               <Option name="custom_str">-j TCPMSS --set-mss 1400</Option>
@@ -25523,13 +26342,13 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="ipfw_pipe_method">0</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
-              <Option name="tagvalue"></Option>
+              <Option name="tagvalue"/>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -25550,7 +26369,7 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="classify_str">1:2</Option>
               <Option name="color">#7694C0</Option>
               <Option name="custom_str">-j TCPMSS --set-mss 1400</Option>
@@ -25558,13 +26377,13 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="ipfw_pipe_method">0</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
-              <Option name="tagvalue"></Option>
+              <Option name="tagvalue"/>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -25585,7 +26404,7 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="classify_str">1:2</Option>
               <Option name="color">#7694C0</Option>
               <Option name="custom_str">-j TCPMSS --set-mss 1400</Option>
@@ -25593,13 +26412,13 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="ipfw_pipe_method">0</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
-              <Option name="tagvalue"></Option>
+              <Option name="tagvalue"/>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -25620,28 +26439,28 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="classify_str">1:10</Option>
               <Option name="color">#C0BA44</Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
               <Option name="ipt_mark_prerouting">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -25662,28 +26481,28 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="classify_str">1:11</Option>
               <Option name="color">#C0BA44</Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
               <Option name="ipt_mark_prerouting">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -25705,28 +26524,28 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="classify_str">1:10</Option>
               <Option name="color">#C0BA44</Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
               <Option name="ipt_mark_prerouting">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -25749,28 +26568,28 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="classify_str">1:10</Option>
               <Option name="color">#C0BA44</Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
               <Option name="ipt_mark_prerouting">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -25792,28 +26611,28 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="classify_str">1:11</Option>
               <Option name="color">#C0BA44</Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
               <Option name="ipt_mark_prerouting">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -25834,15 +26653,15 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
-              <Option name="classify_str"></Option>
+              <Option name="action_on_reject"/>
+              <Option name="classify_str"/>
               <Option name="color">#C0C0C0</Option>
               <Option name="custom_str">-j TCPMSS --set-mss 1400</Option>
               <Option name="ipfw_pipe_method">0</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
-              <Option name="tagvalue"></Option>
+              <Option name="tagvalue"/>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id43495X28575" disabled="False" group="" log="True" position="36" action="Branch" direction="Both" comment="">
@@ -25862,29 +26681,29 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="branch_id">id29865X28575</Option>
-              <Option name="classify_str"></Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="classify_str"/>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_branch_in_mangle">True</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -25928,27 +26747,27 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
-              <Option name="classify_str"></Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="action_on_reject"/>
+              <Option name="classify_str"/>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">False</Option>
               <Option name="tagobject_id">id43EC877332486</Option>
             </PolicyRuleOptions>
@@ -25970,27 +26789,27 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
-              <Option name="classify_str"></Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="action_on_reject"/>
+              <Option name="classify_str"/>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">False</Option>
               <Option name="tagobject_id">id449328D924380</Option>
             </PolicyRuleOptions>
@@ -26035,27 +26854,27 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
-              <Option name="classify_str"></Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="action_on_reject"/>
+              <Option name="classify_str"/>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">True</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">False</Option>
               <Option name="tagobject_id">id449328D824380</Option>
             </PolicyRuleOptions>
@@ -26077,27 +26896,27 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="classify_str">1:12</Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -26118,28 +26937,28 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="classify_str">1:12</Option>
-              <Option name="color"></Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="color"/>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -26160,28 +26979,28 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="classify_str">1:12</Option>
-              <Option name="color"></Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="color"/>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -26202,28 +27021,28 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="classify_str">1:12</Option>
-              <Option name="color"></Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="color"/>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -26244,28 +27063,28 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="classify_str">1:12</Option>
-              <Option name="color"></Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="color"/>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -26286,28 +27105,28 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="classify_str">1:12</Option>
-              <Option name="color"></Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="color"/>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -26328,28 +27147,28 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="classify_str">1:12</Option>
-              <Option name="color"></Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="color"/>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -26370,28 +27189,28 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="classify_str">1:12</Option>
-              <Option name="color"></Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="color"/>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -26412,28 +27231,28 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="classify_str">1:12</Option>
-              <Option name="color"></Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="color"/>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -26454,28 +27273,28 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="classify_str">1:12</Option>
-              <Option name="color"></Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="color"/>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -26496,28 +27315,28 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="classify_str">1:12</Option>
-              <Option name="color"></Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="color"/>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -26538,28 +27357,28 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="classify_str">1:12</Option>
-              <Option name="color"></Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="color"/>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -26580,28 +27399,28 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="classify_str">1:12</Option>
-              <Option name="color"></Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="color"/>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -26655,48 +27474,48 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
           <Option name="action_on_reject">ICMP host prohibited</Option>
-          <Option name="activationCmd"></Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="activationCmd"/>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">False</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
           <Option name="classify_mark_terminating">True</Option>
-          <Option name="cmdline"></Option>
-          <Option name="compiler"></Option>
+          <Option name="cmdline"/>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="drop_invalid">False</Option>
-          <Option name="epilog_script"></Option>
-          <Option name="firewall_dir"></Option>
+          <Option name="epilog_script"/>
+          <Option name="firewall_dir"/>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="ignore_empty_groups">True</Option>
           <Option name="ipt_mangle_only_rulesets"> mangle_rules</Option>
           <Option name="ipv4_6_order">ipv4_first</Option>
-          <Option name="limit_suffix"></Option>
+          <Option name="limit_suffix"/>
           <Option name="limit_value">0</Option>
-          <Option name="linux24_accept_redirects"></Option>
-          <Option name="linux24_accept_source_route"></Option>
-          <Option name="linux24_icmp_echo_ignore_all"></Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
-          <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
-          <Option name="linux24_ip_dynaddr"></Option>
-          <Option name="linux24_ip_forward"></Option>
-          <Option name="linux24_log_martians"></Option>
-          <Option name="linux24_path_ip"></Option>
-          <Option name="linux24_path_iptables"></Option>
-          <Option name="linux24_path_logger"></Option>
-          <Option name="linux24_path_lsmod"></Option>
-          <Option name="linux24_path_modprobe"></Option>
-          <Option name="linux24_rp_filter"></Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_accept_redirects"/>
+          <Option name="linux24_accept_source_route"/>
+          <Option name="linux24_icmp_echo_ignore_all"/>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
+          <Option name="linux24_icmp_ignore_bogus_error_responses"/>
+          <Option name="linux24_ip_dynaddr"/>
+          <Option name="linux24_ip_forward"/>
+          <Option name="linux24_log_martians"/>
+          <Option name="linux24_path_ip"/>
+          <Option name="linux24_path_iptables"/>
+          <Option name="linux24_path_logger"/>
+          <Option name="linux24_path_lsmod"/>
+          <Option name="linux24_path_modprobe"/>
+          <Option name="linux24_rp_filter"/>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">30</Option>
           <Option name="linux24_tcp_keepalive_interval">1800</Option>
-          <Option name="linux24_tcp_sack"></Option>
-          <Option name="linux24_tcp_syncookies"></Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_sack"/>
+          <Option name="linux24_tcp_syncookies"/>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">True</Option>
           <Option name="local_nat">True</Option>
           <Option name="log_all">False</Option>
@@ -26708,17 +27527,17 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="log_tcp_opt">False</Option>
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"></Option>
+          <Option name="mgmt_addr"/>
           <Option name="mgmt_ssh">False</Option>
           <Option name="no_ipv6_default_policy">False</Option>
           <Option name="no_optimisation">False</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="prolog_place">top</Option>
-          <Option name="prolog_script"></Option>
-          <Option name="snmp_contact"></Option>
-          <Option name="snmp_description"></Option>
-          <Option name="snmp_location"></Option>
-          <Option name="sshArgs"></Option>
+          <Option name="prolog_script"/>
+          <Option name="snmp_contact"/>
+          <Option name="snmp_description"/>
+          <Option name="snmp_location"/>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -26750,6 +27569,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id43EC8B962279" disabled="False" group="" position="1" action="Translate" comment="">
@@ -26771,6 +27593,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <RuleSetOptions/>
@@ -26793,8 +27618,8 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="action_on_reject"/>
+              <Option name="rule_name_accounting"/>
               <Option name="tagobject_id">id43EC877332486</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -26815,8 +27640,8 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="action_on_reject"/>
+              <Option name="rule_name_accounting"/>
               <Option name="tagobject_id">id43EC877332486</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -26837,8 +27662,8 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="action_on_reject"/>
+              <Option name="rule_name_accounting"/>
               <Option name="tagobject_id">id43EC877332486</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -26859,8 +27684,8 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="action_on_reject"/>
+              <Option name="rule_name_accounting"/>
               <Option name="tagobject_id">id43EC877332486</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -26881,27 +27706,27 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
-              <Option name="classify_str"></Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="action_on_reject"/>
+              <Option name="classify_str"/>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
               <Option name="ipt_mark_prerouting">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="tagobject_id">id449328D924380</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -26922,27 +27747,27 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
-              <Option name="classify_str"></Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="action_on_reject"/>
+              <Option name="classify_str"/>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
               <Option name="ipt_mark_prerouting">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="tagobject_id">id449328D924380</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -26963,27 +27788,27 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
-              <Option name="classify_str"></Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="action_on_reject"/>
+              <Option name="classify_str"/>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
               <Option name="ipt_mark_prerouting">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="tagobject_id">id449328D924380</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -27004,27 +27829,27 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
-              <Option name="classify_str"></Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="action_on_reject"/>
+              <Option name="classify_str"/>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
               <Option name="ipt_mark_prerouting">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="tagobject_id">id449328D924380</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -27045,27 +27870,27 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
-              <Option name="classify_str"></Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="action_on_reject"/>
+              <Option name="classify_str"/>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
               <Option name="ipt_mark_prerouting">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="tagobject_id">id449328D924380</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -27227,48 +28052,48 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
           <Option name="action_on_reject">ICMP host prohibited</Option>
-          <Option name="activationCmd"></Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="activationCmd"/>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">False</Option>
           <Option name="clamp_mss_to_mtu">True</Option>
           <Option name="classify_mark_terminating">False</Option>
-          <Option name="cmdline"></Option>
-          <Option name="compiler"></Option>
+          <Option name="cmdline"/>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="drop_invalid">False</Option>
           <Option name="enable_ipv6">False</Option>
-          <Option name="epilog_script"></Option>
-          <Option name="firewall_dir"></Option>
+          <Option name="epilog_script"/>
+          <Option name="firewall_dir"/>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="ignore_empty_groups">True</Option>
           <Option name="ipv4_6_order">ipv4_first</Option>
-          <Option name="limit_suffix"></Option>
+          <Option name="limit_suffix"/>
           <Option name="limit_value">0</Option>
-          <Option name="linux24_accept_redirects"></Option>
-          <Option name="linux24_accept_source_route"></Option>
-          <Option name="linux24_icmp_echo_ignore_all"></Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
-          <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
-          <Option name="linux24_ip_dynaddr"></Option>
-          <Option name="linux24_ip_forward"></Option>
-          <Option name="linux24_log_martians"></Option>
-          <Option name="linux24_path_ip"></Option>
-          <Option name="linux24_path_iptables"></Option>
-          <Option name="linux24_path_logger"></Option>
-          <Option name="linux24_path_lsmod"></Option>
-          <Option name="linux24_path_modprobe"></Option>
-          <Option name="linux24_rp_filter"></Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_accept_redirects"/>
+          <Option name="linux24_accept_source_route"/>
+          <Option name="linux24_icmp_echo_ignore_all"/>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
+          <Option name="linux24_icmp_ignore_bogus_error_responses"/>
+          <Option name="linux24_ip_dynaddr"/>
+          <Option name="linux24_ip_forward"/>
+          <Option name="linux24_log_martians"/>
+          <Option name="linux24_path_ip"/>
+          <Option name="linux24_path_iptables"/>
+          <Option name="linux24_path_logger"/>
+          <Option name="linux24_path_lsmod"/>
+          <Option name="linux24_path_modprobe"/>
+          <Option name="linux24_rp_filter"/>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">30</Option>
           <Option name="linux24_tcp_keepalive_interval">1800</Option>
-          <Option name="linux24_tcp_sack"></Option>
-          <Option name="linux24_tcp_syncookies"></Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_sack"/>
+          <Option name="linux24_tcp_syncookies"/>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">True</Option>
           <Option name="local_nat">True</Option>
           <Option name="log_all">False</Option>
@@ -27280,17 +28105,17 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="log_tcp_opt">False</Option>
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"></Option>
+          <Option name="mgmt_addr"/>
           <Option name="mgmt_ssh">False</Option>
           <Option name="no_ipv6_default_policy">False</Option>
           <Option name="no_optimisation">False</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="prolog_place">top</Option>
-          <Option name="prolog_script"></Option>
-          <Option name="snmp_contact"></Option>
-          <Option name="snmp_description"></Option>
-          <Option name="snmp_location"></Option>
-          <Option name="sshArgs"></Option>
+          <Option name="prolog_script"/>
+          <Option name="snmp_contact"/>
+          <Option name="snmp_description"/>
+          <Option name="snmp_location"/>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -27574,15 +28399,15 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="classify_str">1:12</Option>
-              <Option name="custom_str"></Option>
+              <Option name="custom_str"/>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
-              <Option name="tagvalue"></Option>
+              <Option name="tagvalue"/>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id440C2DA414846" disabled="False" group="" log="False" position="14" action="Classify" direction="Outbound" comment="">
@@ -27602,15 +28427,15 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="classify_str">2:12</Option>
-              <Option name="custom_str"></Option>
+              <Option name="custom_str"/>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
-              <Option name="tagvalue"></Option>
+              <Option name="tagvalue"/>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id451CBF6532306" disabled="False" group="" log="True" position="15" action="Classify" direction="Outbound" comment="">
@@ -27630,15 +28455,15 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="classify_str">1:12</Option>
-              <Option name="custom_str"></Option>
+              <Option name="custom_str"/>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
-              <Option name="tagvalue"></Option>
+              <Option name="tagvalue"/>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id440C05B114846" disabled="False" group="" log="False" position="16" action="Accept" direction="Both" comment="">
@@ -27837,12 +28662,12 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
         <Interface id="id440C063114846" dedicated_failover="False" dyn="False" label="" mgmt="False" security_level="100" unnum="False" unprotected="False" name="br0" comment="" ro="False">
           <IPv4 id="id440C063314846" name="firewall23-1:br0:ip" comment="" ro="False" address="192.168.1.1" netmask="255.255.255.0"/>
           <InterfaceOptions>
-            <Option name="bonding_policy"></Option>
-            <Option name="bondng_driver_options"></Option>
+            <Option name="bonding_policy"/>
+            <Option name="bondng_driver_options"/>
             <Option name="enable_stp">False</Option>
             <Option name="type">bridge</Option>
             <Option name="vlan_id">0</Option>
-            <Option name="xmit_hash_policy"></Option>
+            <Option name="xmit_hash_policy"/>
           </InterfaceOptions>
           <Interface id="id268374X84702" dedicated_failover="False" dyn="False" label="" mgmt="False" security_level="0" unnum="False" unprotected="False" name="eth2" comment="" ro="False">
             <InterfaceOptions>
@@ -27864,53 +28689,53 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
           <Option name="action_on_reject">ICMP net unreachable</Option>
-          <Option name="activationCmd"></Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="activationCmd"/>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">True</Option>
           <Option name="check_shading">False</Option>
           <Option name="clamp_mss_to_mtu">True</Option>
           <Option name="classify_mark_terminating">False</Option>
-          <Option name="cmdline"></Option>
-          <Option name="compiler"></Option>
+          <Option name="cmdline"/>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="drop_invalid">False</Option>
           <Option name="dyn_addr">False</Option>
           <Option name="enable_ipv6">False</Option>
-          <Option name="epilog_script"></Option>
-          <Option name="firewall_dir"></Option>
+          <Option name="epilog_script"/>
+          <Option name="firewall_dir"/>
           <Option name="firewall_is_part_of_any">True</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="ignore_empty_groups">False</Option>
-          <Option name="inst_cmdline"></Option>
-          <Option name="inst_script"></Option>
-          <Option name="install_script"></Option>
+          <Option name="inst_cmdline"/>
+          <Option name="inst_script"/>
+          <Option name="install_script"/>
           <Option name="ipv4_6_order">ipv4_first</Option>
           <Option name="limit_suffix">/day</Option>
           <Option name="limit_value">0</Option>
-          <Option name="linux24_accept_redirects"></Option>
-          <Option name="linux24_accept_source_route"></Option>
-          <Option name="linux24_icmp_echo_ignore_all"></Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
-          <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
-          <Option name="linux24_ip_dynaddr"></Option>
-          <Option name="linux24_ip_forward"></Option>
-          <Option name="linux24_log_martians"></Option>
-          <Option name="linux24_path_ip"></Option>
-          <Option name="linux24_path_iptables"></Option>
-          <Option name="linux24_path_logger"></Option>
-          <Option name="linux24_path_lsmod"></Option>
-          <Option name="linux24_path_modprobe"></Option>
-          <Option name="linux24_rp_filter"></Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_accept_redirects"/>
+          <Option name="linux24_accept_source_route"/>
+          <Option name="linux24_icmp_echo_ignore_all"/>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
+          <Option name="linux24_icmp_ignore_bogus_error_responses"/>
+          <Option name="linux24_ip_dynaddr"/>
+          <Option name="linux24_ip_forward"/>
+          <Option name="linux24_log_martians"/>
+          <Option name="linux24_path_ip"/>
+          <Option name="linux24_path_iptables"/>
+          <Option name="linux24_path_logger"/>
+          <Option name="linux24_path_lsmod"/>
+          <Option name="linux24_path_modprobe"/>
+          <Option name="linux24_rp_filter"/>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">30</Option>
           <Option name="linux24_tcp_keepalive_interval">1800</Option>
-          <Option name="linux24_tcp_sack"></Option>
-          <Option name="linux24_tcp_syncookies"></Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_sack"/>
+          <Option name="linux24_tcp_syncookies"/>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">False</Option>
           <Option name="local_nat">False</Option>
           <Option name="log_all">False</Option>
@@ -27920,25 +28745,25 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="log_level">debug</Option>
           <Option name="log_limit_suffix">/second</Option>
           <Option name="log_limit_value">0</Option>
-          <Option name="log_prefix"></Option>
+          <Option name="log_prefix"/>
           <Option name="log_tcp_opt">False</Option>
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"></Option>
+          <Option name="mgmt_addr"/>
           <Option name="mgmt_ssh">False</Option>
           <Option name="no_iochains_for_any">False</Option>
           <Option name="no_ipv6_default_policy">False</Option>
           <Option name="no_optimisation">False</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="platform">iptables</Option>
           <Option name="prolog_place">top</Option>
-          <Option name="prolog_script"></Option>
+          <Option name="prolog_script"/>
           <Option name="proxy_arp">False</Option>
-          <Option name="script_env_path"></Option>
-          <Option name="snmp_contact"></Option>
-          <Option name="snmp_description"></Option>
-          <Option name="snmp_location"></Option>
-          <Option name="sshArgs"></Option>
+          <Option name="script_env_path"/>
+          <Option name="snmp_contact"/>
+          <Option name="snmp_description"/>
+          <Option name="snmp_location"/>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -27971,6 +28796,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <RuleSetOptions/>
@@ -27993,10 +28821,10 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="branch_name">rule0_branch</Option>
               <Option name="color">#C0BA44</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
               <Option name="tagvalue">16</Option>
             </PolicyRuleOptions>
@@ -28018,10 +28846,10 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="branch_name">rule1_branch</Option>
               <Option name="color">#C0BA44</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
               <Option name="tagvalue">16</Option>
             </PolicyRuleOptions>
@@ -28043,10 +28871,10 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="branch_name">rule2_branch</Option>
               <Option name="color">#C0BA44</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
               <Option name="tagvalue">16</Option>
             </PolicyRuleOptions>
@@ -28068,10 +28896,10 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="branch_name">rule3_branch</Option>
               <Option name="color">#C0BA44</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
               <Option name="tagvalue">16</Option>
             </PolicyRuleOptions>
@@ -28093,30 +28921,30 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="branch_name">rule3_branch</Option>
-              <Option name="classify_str"></Option>
+              <Option name="classify_str"/>
               <Option name="color">#C0BA44</Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_branch_in_mangle">False</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
               <Option name="ipt_mark_prerouting">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
               <Option name="tagvalue">16</Option>
             </PolicyRuleOptions>
@@ -28160,7 +28988,7 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="branch_name">rule5_branch</Option>
               <Option name="classify_str">1:2</Option>
               <Option name="color">#C0BA44</Option>
@@ -28169,13 +28997,13 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="ipfw_pipe_method">0</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
-              <Option name="tagvalue"></Option>
+              <Option name="tagvalue"/>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -28196,30 +29024,30 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="branch_name">rule0_branch</Option>
-              <Option name="classify_str"></Option>
+              <Option name="classify_str"/>
               <Option name="color">#8BC065</Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_branch_in_mangle">True</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
               <Option name="ipt_mark_prerouting">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
               <Option name="tagvalue">16</Option>
             </PolicyRuleOptions>
@@ -28241,30 +29069,30 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="branch_name">rule1_branch</Option>
-              <Option name="classify_str"></Option>
+              <Option name="classify_str"/>
               <Option name="color">#8BC065</Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_branch_in_mangle">True</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
               <Option name="ipt_mark_prerouting">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
               <Option name="tagvalue">16</Option>
             </PolicyRuleOptions>
@@ -28286,30 +29114,30 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="branch_name">rule2_branch</Option>
-              <Option name="classify_str"></Option>
+              <Option name="classify_str"/>
               <Option name="color">#8BC065</Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_branch_in_mangle">True</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
               <Option name="ipt_mark_prerouting">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
               <Option name="tagvalue">16</Option>
             </PolicyRuleOptions>
@@ -28331,30 +29159,30 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="branch_name">rule3_branch</Option>
-              <Option name="classify_str"></Option>
+              <Option name="classify_str"/>
               <Option name="color">#8BC065</Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_branch_in_mangle">True</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
               <Option name="ipt_mark_prerouting">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
               <Option name="tagvalue">16</Option>
             </PolicyRuleOptions>
@@ -28376,30 +29204,30 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="branch_name">rule3_branch</Option>
-              <Option name="classify_str"></Option>
+              <Option name="classify_str"/>
               <Option name="color">#8BC065</Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_branch_in_mangle">True</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
               <Option name="ipt_mark_prerouting">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
               <Option name="tagvalue">16</Option>
             </PolicyRuleOptions>
@@ -28421,30 +29249,30 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="branch_name">rule4_branch</Option>
-              <Option name="classify_str"></Option>
+              <Option name="classify_str"/>
               <Option name="color">#8BC065</Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_branch_in_mangle">True</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
               <Option name="ipt_mark_prerouting">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -28465,14 +29293,14 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="branch_name">rule5_branch</Option>
               <Option name="classify_str">1:2</Option>
               <Option name="color">#8BC065</Option>
               <Option name="custom_str">-j TCPMSS --set-mss 1400</Option>
               <Option name="firewall_is_part_of_any_and_networks">False</Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_method">0</Option>
@@ -28480,24 +29308,24 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_branch_in_mangle">True</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
               <Option name="ipt_mark_prerouting">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="pf_fastroute">False</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
-              <Option name="tagvalue"></Option>
+              <Option name="tagvalue"/>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -28518,14 +29346,14 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
-              <Option name="classify_str"></Option>
+              <Option name="action_on_reject"/>
+              <Option name="classify_str"/>
               <Option name="custom_str">-j TCPMSS --set-mss 1400</Option>
               <Option name="ipfw_pipe_method">0</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
-              <Option name="tagvalue"></Option>
+              <Option name="tagvalue"/>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id451DA7EF4163" disabled="False" group="" log="True" position="15" action="Custom" direction="Both" comment="">
@@ -28545,27 +29373,27 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
-              <Option name="classify_str"></Option>
+              <Option name="action_on_reject"/>
+              <Option name="classify_str"/>
               <Option name="custom_str">-j TARPIT</Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">Route through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
               <Option name="ipt_mark_prerouting">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">Route through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -28858,29 +29686,29 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="branch_name">rule_4_0_branch</Option>
-              <Option name="classify_str"></Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="classify_str"/>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_branch_in_mangle">False</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
               <Option name="ipt_mark_prerouting">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -28901,29 +29729,29 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="branch_name">rule_4_1_branch</Option>
-              <Option name="classify_str"></Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="classify_str"/>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_branch_in_mangle">False</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
               <Option name="ipt_mark_prerouting">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -28997,46 +29825,46 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
           <Option name="action_on_reject">ICMP host prohibited</Option>
-          <Option name="activationCmd"></Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="activationCmd"/>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">True</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
           <Option name="classify_mark_terminating">False</Option>
-          <Option name="cmdline"></Option>
-          <Option name="compiler"></Option>
+          <Option name="cmdline"/>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="drop_invalid">False</Option>
-          <Option name="epilog_script"></Option>
-          <Option name="firewall_dir"></Option>
+          <Option name="epilog_script"/>
+          <Option name="firewall_dir"/>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="ignore_empty_groups">True</Option>
-          <Option name="limit_suffix"></Option>
+          <Option name="limit_suffix"/>
           <Option name="limit_value">0</Option>
-          <Option name="linux24_accept_redirects"></Option>
-          <Option name="linux24_accept_source_route"></Option>
-          <Option name="linux24_icmp_echo_ignore_all"></Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
-          <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
-          <Option name="linux24_ip_dynaddr"></Option>
-          <Option name="linux24_ip_forward"></Option>
-          <Option name="linux24_log_martians"></Option>
-          <Option name="linux24_path_ip"></Option>
-          <Option name="linux24_path_iptables"></Option>
-          <Option name="linux24_path_logger"></Option>
-          <Option name="linux24_path_lsmod"></Option>
-          <Option name="linux24_path_modprobe"></Option>
-          <Option name="linux24_rp_filter"></Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_accept_redirects"/>
+          <Option name="linux24_accept_source_route"/>
+          <Option name="linux24_icmp_echo_ignore_all"/>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
+          <Option name="linux24_icmp_ignore_bogus_error_responses"/>
+          <Option name="linux24_ip_dynaddr"/>
+          <Option name="linux24_ip_forward"/>
+          <Option name="linux24_log_martians"/>
+          <Option name="linux24_path_ip"/>
+          <Option name="linux24_path_iptables"/>
+          <Option name="linux24_path_logger"/>
+          <Option name="linux24_path_lsmod"/>
+          <Option name="linux24_path_modprobe"/>
+          <Option name="linux24_rp_filter"/>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">30</Option>
           <Option name="linux24_tcp_keepalive_interval">1800</Option>
-          <Option name="linux24_tcp_sack"></Option>
-          <Option name="linux24_tcp_syncookies"></Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_sack"/>
+          <Option name="linux24_tcp_syncookies"/>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">True</Option>
           <Option name="local_nat">True</Option>
           <Option name="log_all">False</Option>
@@ -29048,17 +29876,17 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="log_tcp_opt">False</Option>
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"></Option>
+          <Option name="mgmt_addr"/>
           <Option name="mgmt_ssh">False</Option>
           <Option name="no_ipv6_default_policy">False</Option>
           <Option name="no_optimisation">False</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="prolog_place">top</Option>
-          <Option name="prolog_script"></Option>
-          <Option name="snmp_contact"></Option>
-          <Option name="snmp_description"></Option>
-          <Option name="snmp_location"></Option>
-          <Option name="sshArgs"></Option>
+          <Option name="prolog_script"/>
+          <Option name="snmp_contact"/>
+          <Option name="snmp_description"/>
+          <Option name="snmp_location"/>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -29089,6 +29917,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <RuleSetOptions/>
@@ -29111,28 +29942,28 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
-              <Option name="branch_anchor_name"></Option>
-              <Option name="branch_chain_name"></Option>
-              <Option name="classify_str"></Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="action_on_reject"/>
+              <Option name="branch_anchor_name"/>
+              <Option name="branch_chain_name"/>
+              <Option name="classify_str"/>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">Route through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">True</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">Route through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="tagobject_id">id449328D824380</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -29153,28 +29984,28 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
-              <Option name="branch_anchor_name"></Option>
-              <Option name="branch_chain_name"></Option>
-              <Option name="classify_str"></Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="action_on_reject"/>
+              <Option name="branch_anchor_name"/>
+              <Option name="branch_chain_name"/>
+              <Option name="classify_str"/>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">Route through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">True</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">Route through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="tagobject_id">id449328D924380</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -29213,28 +30044,28 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
-              <Option name="branch_anchor_name"></Option>
-              <Option name="branch_chain_name"></Option>
-              <Option name="classify_str"></Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="action_on_reject"/>
+              <Option name="branch_anchor_name"/>
+              <Option name="branch_chain_name"/>
+              <Option name="classify_str"/>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">Route through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">True</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
               <Option name="ipt_oif">eth0</Option>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">Route through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -29255,28 +30086,28 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
-              <Option name="branch_anchor_name"></Option>
-              <Option name="branch_chain_name"></Option>
-              <Option name="classify_str"></Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="action_on_reject"/>
+              <Option name="branch_anchor_name"/>
+              <Option name="branch_chain_name"/>
+              <Option name="classify_str"/>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">Route through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">True</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
               <Option name="ipt_oif">eth2</Option>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">Route through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -29318,27 +30149,27 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
-              <Option name="classify_str"></Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="action_on_reject"/>
+              <Option name="classify_str"/>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">False</Option>
               <Option name="tagobject_id">id365999</Option>
             </PolicyRuleOptions>
@@ -29372,29 +30203,29 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
         <FirewallOptions>
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
-          <Option name="action_on_reject"></Option>
-          <Option name="activationCmd"></Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="action_on_reject"/>
+          <Option name="activationCmd"/>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">False</Option>
           <Option name="clamp_mss_to_mtu">True</Option>
           <Option name="classify_mark_terminating">False</Option>
-          <Option name="cmdline"></Option>
-          <Option name="compiler"></Option>
+          <Option name="cmdline"/>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="drop_invalid">False</Option>
           <Option name="eliminate_duplicates">true</Option>
           <Option name="enable_ipv6">False</Option>
-          <Option name="epilog_script"></Option>
+          <Option name="epilog_script"/>
           <Option name="firewall_dir">/etc</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="freebsd_ip_forward">1</Option>
           <Option name="ignore_empty_groups">False</Option>
           <Option name="in_out_code">true</Option>
           <Option name="ipv4_6_order">ipv4_first</Option>
-          <Option name="limit_suffix"></Option>
+          <Option name="limit_suffix"/>
           <Option name="limit_value">0</Option>
           <Option name="linux24_ip_forward">1</Option>
           <Option name="load_modules">True</Option>
@@ -29409,11 +30240,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="loopback_interface">lo0</Option>
           <Option name="macosx_ip_forward">1</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"></Option>
+          <Option name="mgmt_addr"/>
           <Option name="mgmt_ssh">False</Option>
           <Option name="no_ipv6_default_policy">False</Option>
           <Option name="openbsd_ip_forward">1</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="pass_all_out">false</Option>
           <Option name="pf_limit_frags">5000</Option>
           <Option name="pf_limit_states">10000</Option>
@@ -29433,11 +30264,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="pix_syslog_device_id_supported">false</Option>
           <Option name="pix_use_acl_remarks">true</Option>
           <Option name="prolog_place">top</Option>
-          <Option name="prolog_script"></Option>
+          <Option name="prolog_script"/>
           <Option name="prompt1">$ </Option>
           <Option name="prompt2"> # </Option>
           <Option name="solaris_ip_forward">1</Option>
-          <Option name="sshArgs"></Option>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -29714,13 +30545,13 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="hashlimit_burst">0</Option>
               <Option name="hashlimit_dstlimit">False</Option>
               <Option name="hashlimit_mode">dstip</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">False</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -29888,26 +30719,26 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
         <FirewallOptions>
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
-          <Option name="action_on_reject"></Option>
-          <Option name="activationCmd"></Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="action_on_reject"/>
+          <Option name="activationCmd"/>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">True</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
           <Option name="cmdline">-xt</Option>
-          <Option name="compiler"></Option>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="drop_invalid">False</Option>
           <Option name="eliminate_duplicates">true</Option>
-          <Option name="epilog_script"></Option>
+          <Option name="epilog_script"/>
           <Option name="firewall_dir">/etc</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="freebsd_ip_forward">1</Option>
           <Option name="ignore_empty_groups">False</Option>
           <Option name="in_out_code">true</Option>
-          <Option name="limit_suffix"></Option>
+          <Option name="limit_suffix"/>
           <Option name="limit_value">0</Option>
           <Option name="linux24_ip_forward">1</Option>
           <Option name="load_modules">True</Option>
@@ -29922,10 +30753,10 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="loopback_interface">lo0</Option>
           <Option name="macosx_ip_forward">1</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"></Option>
+          <Option name="mgmt_addr"/>
           <Option name="mgmt_ssh">False</Option>
           <Option name="openbsd_ip_forward">1</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="pass_all_out">false</Option>
           <Option name="pf_limit_frags">5000</Option>
           <Option name="pf_limit_states">10000</Option>
@@ -29945,11 +30776,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="pix_syslog_device_id_supported">false</Option>
           <Option name="pix_use_acl_remarks">true</Option>
           <Option name="prolog_place">top</Option>
-          <Option name="prolog_script"></Option>
+          <Option name="prolog_script"/>
           <Option name="prompt1">$ </Option>
           <Option name="prompt2"> # </Option>
           <Option name="solaris_ip_forward">1</Option>
-          <Option name="sshArgs"></Option>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -30025,13 +30856,13 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="hashlimit_burst">0</Option>
               <Option name="hashlimit_dstlimit">False</Option>
               <Option name="hashlimit_mode">dstip</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">False</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -30139,26 +30970,26 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
         <FirewallOptions>
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
-          <Option name="action_on_reject"></Option>
-          <Option name="activationCmd"></Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="action_on_reject"/>
+          <Option name="activationCmd"/>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">True</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
           <Option name="cmdline">-xt</Option>
-          <Option name="compiler"></Option>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="drop_invalid">False</Option>
           <Option name="eliminate_duplicates">true</Option>
-          <Option name="epilog_script"></Option>
+          <Option name="epilog_script"/>
           <Option name="firewall_dir">/etc</Option>
           <Option name="firewall_is_part_of_any_and_networks">False</Option>
           <Option name="freebsd_ip_forward">1</Option>
           <Option name="ignore_empty_groups">False</Option>
           <Option name="in_out_code">true</Option>
-          <Option name="limit_suffix"></Option>
+          <Option name="limit_suffix"/>
           <Option name="limit_value">0</Option>
           <Option name="linux24_ip_forward">1</Option>
           <Option name="load_modules">True</Option>
@@ -30173,10 +31004,10 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="loopback_interface">lo0</Option>
           <Option name="macosx_ip_forward">1</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"></Option>
+          <Option name="mgmt_addr"/>
           <Option name="mgmt_ssh">False</Option>
           <Option name="openbsd_ip_forward">1</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="pass_all_out">false</Option>
           <Option name="pf_limit_frags">5000</Option>
           <Option name="pf_limit_states">10000</Option>
@@ -30196,11 +31027,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="pix_syslog_device_id_supported">false</Option>
           <Option name="pix_use_acl_remarks">true</Option>
           <Option name="prolog_place">top</Option>
-          <Option name="prolog_script"></Option>
+          <Option name="prolog_script"/>
           <Option name="prompt1">$ </Option>
           <Option name="prompt2"> # </Option>
           <Option name="solaris_ip_forward">1</Option>
-          <Option name="sshArgs"></Option>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -30232,6 +31063,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <RuleSetOptions/>
@@ -30254,29 +31088,29 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
-              <Option name="classify_str"></Option>
+              <Option name="action_on_reject"/>
+              <Option name="classify_str"/>
               <Option name="classify_terminating_target">False</Option>
               <Option name="color">#C0BA44</Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
               <Option name="ipt_mark_prerouting">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="tag_terminating_target">True</Option>
               <Option name="tagobject_id">id43EC877332486</Option>
             </PolicyRuleOptions>
@@ -30298,29 +31132,29 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
-              <Option name="classify_str"></Option>
+              <Option name="action_on_reject"/>
+              <Option name="classify_str"/>
               <Option name="classify_terminating_target">False</Option>
               <Option name="color">#C0BA44</Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
               <Option name="ipt_mark_prerouting">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="tag_terminating_target">True</Option>
               <Option name="tagobject_id">id43EC877332486</Option>
             </PolicyRuleOptions>
@@ -30343,29 +31177,29 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
-              <Option name="classify_str"></Option>
+              <Option name="action_on_reject"/>
+              <Option name="classify_str"/>
               <Option name="classify_terminating_target">False</Option>
               <Option name="color">#C0BA44</Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
               <Option name="ipt_mark_prerouting">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="tag_terminating_target">True</Option>
               <Option name="tagobject_id">id43EC877332486</Option>
             </PolicyRuleOptions>
@@ -30387,29 +31221,29 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
-              <Option name="classify_str"></Option>
+              <Option name="action_on_reject"/>
+              <Option name="classify_str"/>
               <Option name="classify_terminating_target">False</Option>
               <Option name="color">#C0BA44</Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
               <Option name="ipt_mark_prerouting">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="tag_terminating_target">True</Option>
               <Option name="tagobject_id">id43EC877332486</Option>
             </PolicyRuleOptions>
@@ -30431,29 +31265,29 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
-              <Option name="classify_str"></Option>
+              <Option name="action_on_reject"/>
+              <Option name="classify_str"/>
               <Option name="classify_terminating_target">False</Option>
               <Option name="color">#C0BA44</Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
               <Option name="ipt_mark_prerouting">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="tag_terminating_target">True</Option>
               <Option name="tagobject_id">id43EC877332486</Option>
             </PolicyRuleOptions>
@@ -30475,29 +31309,29 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
-              <Option name="classify_str"></Option>
+              <Option name="action_on_reject"/>
+              <Option name="classify_str"/>
               <Option name="classify_terminating_target">False</Option>
               <Option name="color">#C0C0C0</Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">True</Option>
               <Option name="ipt_mark_prerouting">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="tag_terminating_target">True</Option>
               <Option name="tagobject_id">id342984</Option>
             </PolicyRuleOptions>
@@ -30519,29 +31353,29 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
-              <Option name="classify_str"></Option>
+              <Option name="action_on_reject"/>
+              <Option name="classify_str"/>
               <Option name="classify_terminating_target">False</Option>
               <Option name="color">#C0C0C0</Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">True</Option>
               <Option name="ipt_mark_prerouting">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="tag_terminating_target">True</Option>
               <Option name="tagobject_id">id342984</Option>
             </PolicyRuleOptions>
@@ -30564,29 +31398,29 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
-              <Option name="classify_str"></Option>
+              <Option name="action_on_reject"/>
+              <Option name="classify_str"/>
               <Option name="classify_terminating_target">False</Option>
               <Option name="color">#C0C0C0</Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">True</Option>
               <Option name="ipt_mark_prerouting">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="tag_terminating_target">True</Option>
               <Option name="tagobject_id">id342984</Option>
             </PolicyRuleOptions>
@@ -30608,29 +31442,29 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
-              <Option name="classify_str"></Option>
+              <Option name="action_on_reject"/>
+              <Option name="classify_str"/>
               <Option name="classify_terminating_target">False</Option>
               <Option name="color">#C0C0C0</Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">True</Option>
               <Option name="ipt_mark_prerouting">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="tag_terminating_target">True</Option>
               <Option name="tagobject_id">id365999</Option>
             </PolicyRuleOptions>
@@ -30652,29 +31486,29 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
-              <Option name="classify_str"></Option>
+              <Option name="action_on_reject"/>
+              <Option name="classify_str"/>
               <Option name="classify_terminating_target">False</Option>
               <Option name="color">#C0C0C0</Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">True</Option>
               <Option name="ipt_mark_prerouting">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="tag_terminating_target">True</Option>
               <Option name="tagobject_id">id366232</Option>
             </PolicyRuleOptions>
@@ -30716,29 +31550,29 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="classify_str">1:10</Option>
               <Option name="classify_terminating_target">True</Option>
               <Option name="color">#C0BA44</Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
               <Option name="ipt_mark_prerouting">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
               <Option name="tag_terminating_target">False</Option>
             </PolicyRuleOptions>
@@ -30760,29 +31594,29 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="classify_str">1:11</Option>
               <Option name="classify_terminating_target">True</Option>
               <Option name="color">#C0BA44</Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
               <Option name="ipt_mark_prerouting">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
               <Option name="tag_terminating_target">False</Option>
             </PolicyRuleOptions>
@@ -30805,29 +31639,29 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="classify_str">1:10</Option>
               <Option name="classify_terminating_target">True</Option>
               <Option name="color">#C0BA44</Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
               <Option name="ipt_mark_prerouting">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
               <Option name="tag_terminating_target">False</Option>
             </PolicyRuleOptions>
@@ -30851,29 +31685,29 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="classify_str">1:10</Option>
               <Option name="classify_terminating_target">True</Option>
               <Option name="color">#C0BA44</Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
               <Option name="ipt_mark_prerouting">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
               <Option name="tag_terminating_target">False</Option>
             </PolicyRuleOptions>
@@ -30896,29 +31730,29 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="classify_str">1:11</Option>
               <Option name="classify_terminating_target">True</Option>
               <Option name="color">#C0BA44</Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
               <Option name="ipt_mark_prerouting">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
               <Option name="tag_terminating_target">False</Option>
             </PolicyRuleOptions>
@@ -30940,29 +31774,29 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="classify_str">1:10</Option>
               <Option name="classify_terminating_target">True</Option>
               <Option name="color">#7694C0</Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
               <Option name="ipt_mark_prerouting">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -30983,29 +31817,29 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="classify_str">1:11</Option>
               <Option name="classify_terminating_target">True</Option>
               <Option name="color">#7694C0</Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
               <Option name="ipt_mark_prerouting">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -31026,29 +31860,29 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="classify_str">1:11</Option>
               <Option name="classify_terminating_target">True</Option>
               <Option name="color">#7694C0</Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
               <Option name="ipt_mark_prerouting">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
               <Option name="tag_terminating_target">False</Option>
             </PolicyRuleOptions>
@@ -31071,29 +31905,29 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="classify_str">1:10</Option>
               <Option name="classify_terminating_target">True</Option>
               <Option name="color">#7694C0</Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
               <Option name="ipt_mark_prerouting">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -31116,29 +31950,29 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="classify_str">1:10</Option>
               <Option name="classify_terminating_target">True</Option>
               <Option name="color">#7694C0</Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
               <Option name="ipt_mark_prerouting">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -31160,29 +31994,29 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="classify_str">1:11</Option>
               <Option name="classify_terminating_target">True</Option>
               <Option name="color">#7694C0</Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
               <Option name="ipt_mark_prerouting">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -31203,30 +32037,30 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="branch_name">rule27_branch</Option>
-              <Option name="classify_str"></Option>
+              <Option name="classify_str"/>
               <Option name="color">#7694C0</Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_branch_in_mangle">True</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
               <Option name="ipt_mark_prerouting">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -31247,15 +32081,15 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
-              <Option name="classify_str"></Option>
+              <Option name="action_on_reject"/>
+              <Option name="classify_str"/>
               <Option name="color">#C0C0C0</Option>
               <Option name="custom_str">-j TCPMSS --set-mss 1400</Option>
               <Option name="ipfw_pipe_method">0</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
-              <Option name="tagvalue"></Option>
+              <Option name="tagvalue"/>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id45AB5C4625451" disabled="False" group="" log="True" position="24" action="Deny" direction="Both" comment="">
@@ -31298,28 +32132,28 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="classify_str">1:16</Option>
               <Option name="color">#7694C0</Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
               <Option name="ipt_mark_prerouting">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -31369,46 +32203,46 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
           <Option name="action_on_reject">ICMP host prohibited</Option>
-          <Option name="activationCmd"></Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="activationCmd"/>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">False</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
           <Option name="classify_mark_terminating">True</Option>
-          <Option name="cmdline"></Option>
-          <Option name="compiler"></Option>
+          <Option name="cmdline"/>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="drop_invalid">False</Option>
-          <Option name="epilog_script"></Option>
-          <Option name="firewall_dir"></Option>
+          <Option name="epilog_script"/>
+          <Option name="firewall_dir"/>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="ignore_empty_groups">True</Option>
-          <Option name="limit_suffix"></Option>
+          <Option name="limit_suffix"/>
           <Option name="limit_value">0</Option>
-          <Option name="linux24_accept_redirects"></Option>
-          <Option name="linux24_accept_source_route"></Option>
-          <Option name="linux24_icmp_echo_ignore_all"></Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
-          <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
-          <Option name="linux24_ip_dynaddr"></Option>
-          <Option name="linux24_ip_forward"></Option>
-          <Option name="linux24_log_martians"></Option>
-          <Option name="linux24_path_ip"></Option>
-          <Option name="linux24_path_iptables"></Option>
-          <Option name="linux24_path_logger"></Option>
-          <Option name="linux24_path_lsmod"></Option>
-          <Option name="linux24_path_modprobe"></Option>
-          <Option name="linux24_rp_filter"></Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_accept_redirects"/>
+          <Option name="linux24_accept_source_route"/>
+          <Option name="linux24_icmp_echo_ignore_all"/>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
+          <Option name="linux24_icmp_ignore_bogus_error_responses"/>
+          <Option name="linux24_ip_dynaddr"/>
+          <Option name="linux24_ip_forward"/>
+          <Option name="linux24_log_martians"/>
+          <Option name="linux24_path_ip"/>
+          <Option name="linux24_path_iptables"/>
+          <Option name="linux24_path_logger"/>
+          <Option name="linux24_path_lsmod"/>
+          <Option name="linux24_path_modprobe"/>
+          <Option name="linux24_rp_filter"/>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">30</Option>
           <Option name="linux24_tcp_keepalive_interval">1800</Option>
-          <Option name="linux24_tcp_sack"></Option>
-          <Option name="linux24_tcp_syncookies"></Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_sack"/>
+          <Option name="linux24_tcp_syncookies"/>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">True</Option>
           <Option name="local_nat">True</Option>
           <Option name="log_all">False</Option>
@@ -31420,16 +32254,16 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="log_tcp_opt">False</Option>
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"></Option>
+          <Option name="mgmt_addr"/>
           <Option name="mgmt_ssh">False</Option>
           <Option name="no_optimisation">False</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="prolog_place">top</Option>
-          <Option name="prolog_script"></Option>
-          <Option name="snmp_contact"></Option>
-          <Option name="snmp_description"></Option>
-          <Option name="snmp_location"></Option>
-          <Option name="sshArgs"></Option>
+          <Option name="prolog_script"/>
+          <Option name="snmp_contact"/>
+          <Option name="snmp_description"/>
+          <Option name="snmp_location"/>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -31560,51 +32394,51 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
           <Option name="action_on_reject">ICMP net unreachable</Option>
-          <Option name="activationCmd"></Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="activationCmd"/>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">False</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
           <Option name="classify_mark_terminating">False</Option>
-          <Option name="cmdline"></Option>
-          <Option name="compiler"></Option>
+          <Option name="cmdline"/>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">False</Option>
           <Option name="debug">False</Option>
           <Option name="drop_invalid">False</Option>
           <Option name="dyn_addr">False</Option>
-          <Option name="epilog_script"></Option>
-          <Option name="firewall_dir"></Option>
+          <Option name="epilog_script"/>
+          <Option name="firewall_dir"/>
           <Option name="firewall_is_part_of_any">True</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="ignore_empty_groups">False</Option>
-          <Option name="inst_cmdline"></Option>
-          <Option name="inst_script"></Option>
-          <Option name="install_script"></Option>
+          <Option name="inst_cmdline"/>
+          <Option name="inst_script"/>
+          <Option name="install_script"/>
           <Option name="limit_suffix">/day</Option>
           <Option name="limit_value">0</Option>
-          <Option name="linux24_accept_redirects"></Option>
-          <Option name="linux24_accept_source_route"></Option>
-          <Option name="linux24_icmp_echo_ignore_all"></Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
-          <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
-          <Option name="linux24_ip_dynaddr"></Option>
-          <Option name="linux24_ip_forward"></Option>
-          <Option name="linux24_log_martians"></Option>
-          <Option name="linux24_path_ip"></Option>
-          <Option name="linux24_path_iptables"></Option>
-          <Option name="linux24_path_logger"></Option>
-          <Option name="linux24_path_lsmod"></Option>
-          <Option name="linux24_path_modprobe"></Option>
-          <Option name="linux24_rp_filter"></Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_accept_redirects"/>
+          <Option name="linux24_accept_source_route"/>
+          <Option name="linux24_icmp_echo_ignore_all"/>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
+          <Option name="linux24_icmp_ignore_bogus_error_responses"/>
+          <Option name="linux24_ip_dynaddr"/>
+          <Option name="linux24_ip_forward"/>
+          <Option name="linux24_log_martians"/>
+          <Option name="linux24_path_ip"/>
+          <Option name="linux24_path_iptables"/>
+          <Option name="linux24_path_logger"/>
+          <Option name="linux24_path_lsmod"/>
+          <Option name="linux24_path_modprobe"/>
+          <Option name="linux24_rp_filter"/>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">30</Option>
           <Option name="linux24_tcp_keepalive_interval">1800</Option>
-          <Option name="linux24_tcp_sack"></Option>
-          <Option name="linux24_tcp_syncookies"></Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_sack"/>
+          <Option name="linux24_tcp_syncookies"/>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">False</Option>
           <Option name="local_nat">False</Option>
           <Option name="log_all">False</Option>
@@ -31614,25 +32448,25 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="log_level">debug</Option>
           <Option name="log_limit_suffix">/second</Option>
           <Option name="log_limit_value">0</Option>
-          <Option name="log_prefix"></Option>
+          <Option name="log_prefix"/>
           <Option name="log_tcp_opt">False</Option>
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">False</Option>
-          <Option name="mgmt_addr"></Option>
+          <Option name="mgmt_addr"/>
           <Option name="mgmt_ssh">False</Option>
           <Option name="no_iochains_for_any">False</Option>
           <Option name="no_ipv6_default_policy">False</Option>
           <Option name="no_optimisation">False</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="platform">iptables</Option>
           <Option name="prolog_place">top</Option>
-          <Option name="prolog_script"></Option>
+          <Option name="prolog_script"/>
           <Option name="proxy_arp">False</Option>
-          <Option name="script_env_path"></Option>
-          <Option name="snmp_contact"></Option>
-          <Option name="snmp_description"></Option>
-          <Option name="snmp_location"></Option>
-          <Option name="sshArgs"></Option>
+          <Option name="script_env_path"/>
+          <Option name="snmp_contact"/>
+          <Option name="snmp_description"/>
+          <Option name="snmp_location"/>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -31805,51 +32639,51 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
           <Option name="action_on_reject">ICMP net unreachable</Option>
-          <Option name="activationCmd"></Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="activationCmd"/>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">False</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
           <Option name="classify_mark_terminating">False</Option>
-          <Option name="cmdline"></Option>
-          <Option name="compiler"></Option>
+          <Option name="cmdline"/>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">False</Option>
           <Option name="debug">False</Option>
           <Option name="drop_invalid">False</Option>
           <Option name="dyn_addr">False</Option>
-          <Option name="epilog_script"></Option>
-          <Option name="firewall_dir"></Option>
+          <Option name="epilog_script"/>
+          <Option name="firewall_dir"/>
           <Option name="firewall_is_part_of_any">True</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="ignore_empty_groups">False</Option>
-          <Option name="inst_cmdline"></Option>
-          <Option name="inst_script"></Option>
-          <Option name="install_script"></Option>
+          <Option name="inst_cmdline"/>
+          <Option name="inst_script"/>
+          <Option name="install_script"/>
           <Option name="limit_suffix">/day</Option>
           <Option name="limit_value">0</Option>
-          <Option name="linux24_accept_redirects"></Option>
-          <Option name="linux24_accept_source_route"></Option>
-          <Option name="linux24_icmp_echo_ignore_all"></Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
-          <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
-          <Option name="linux24_ip_dynaddr"></Option>
-          <Option name="linux24_ip_forward"></Option>
-          <Option name="linux24_log_martians"></Option>
-          <Option name="linux24_path_ip"></Option>
-          <Option name="linux24_path_iptables"></Option>
-          <Option name="linux24_path_logger"></Option>
-          <Option name="linux24_path_lsmod"></Option>
-          <Option name="linux24_path_modprobe"></Option>
-          <Option name="linux24_rp_filter"></Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_accept_redirects"/>
+          <Option name="linux24_accept_source_route"/>
+          <Option name="linux24_icmp_echo_ignore_all"/>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
+          <Option name="linux24_icmp_ignore_bogus_error_responses"/>
+          <Option name="linux24_ip_dynaddr"/>
+          <Option name="linux24_ip_forward"/>
+          <Option name="linux24_log_martians"/>
+          <Option name="linux24_path_ip"/>
+          <Option name="linux24_path_iptables"/>
+          <Option name="linux24_path_logger"/>
+          <Option name="linux24_path_lsmod"/>
+          <Option name="linux24_path_modprobe"/>
+          <Option name="linux24_rp_filter"/>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">30</Option>
           <Option name="linux24_tcp_keepalive_interval">1800</Option>
-          <Option name="linux24_tcp_sack"></Option>
-          <Option name="linux24_tcp_syncookies"></Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_sack"/>
+          <Option name="linux24_tcp_syncookies"/>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">False</Option>
           <Option name="local_nat">False</Option>
           <Option name="log_all">False</Option>
@@ -31859,25 +32693,25 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="log_level">debug</Option>
           <Option name="log_limit_suffix">/second</Option>
           <Option name="log_limit_value">0</Option>
-          <Option name="log_prefix"></Option>
+          <Option name="log_prefix"/>
           <Option name="log_tcp_opt">False</Option>
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">False</Option>
-          <Option name="mgmt_addr"></Option>
+          <Option name="mgmt_addr"/>
           <Option name="mgmt_ssh">False</Option>
           <Option name="no_iochains_for_any">False</Option>
           <Option name="no_ipv6_default_policy">False</Option>
           <Option name="no_optimisation">False</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="platform">iptables</Option>
           <Option name="prolog_place">top</Option>
-          <Option name="prolog_script"></Option>
+          <Option name="prolog_script"/>
           <Option name="proxy_arp">False</Option>
-          <Option name="script_env_path"></Option>
-          <Option name="snmp_contact"></Option>
-          <Option name="snmp_description"></Option>
-          <Option name="snmp_location"></Option>
-          <Option name="sshArgs"></Option>
+          <Option name="script_env_path"/>
+          <Option name="snmp_contact"/>
+          <Option name="snmp_description"/>
+          <Option name="snmp_location"/>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -32143,7 +32977,7 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="connlimit_above_not">False</Option>
               <Option name="connlimit_masklen">0</Option>
               <Option name="connlimit_value">0</Option>
-              <Option name="firewall_is_part_of_any_and_networks"></Option>
+              <Option name="firewall_is_part_of_any_and_networks"/>
               <Option name="hashlimit_burst">0</Option>
               <Option name="hashlimit_dstlimit">False</Option>
               <Option name="hashlimit_expire">0</Option>
@@ -32153,16 +32987,16 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="limit_value_not">False</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -32188,7 +33022,7 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="connlimit_above_not">False</Option>
               <Option name="connlimit_masklen">0</Option>
               <Option name="connlimit_value">0</Option>
-              <Option name="firewall_is_part_of_any_and_networks"></Option>
+              <Option name="firewall_is_part_of_any_and_networks"/>
               <Option name="hashlimit_burst">0</Option>
               <Option name="hashlimit_dstlimit">False</Option>
               <Option name="hashlimit_expire">0</Option>
@@ -32198,16 +33032,16 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="limit_value_not">False</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -32233,7 +33067,7 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="connlimit_above_not">False</Option>
               <Option name="connlimit_masklen">0</Option>
               <Option name="connlimit_value">0</Option>
-              <Option name="firewall_is_part_of_any_and_networks"></Option>
+              <Option name="firewall_is_part_of_any_and_networks"/>
               <Option name="hashlimit_burst">0</Option>
               <Option name="hashlimit_dstlimit">False</Option>
               <Option name="hashlimit_expire">0</Option>
@@ -32243,16 +33077,16 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="limit_value_not">False</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -32779,20 +33613,20 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
         <FirewallOptions>
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
-          <Option name="action_on_reject"></Option>
-          <Option name="activationCmd"></Option>
+          <Option name="action_on_reject"/>
+          <Option name="activationCmd"/>
           <Option name="add_check_state_rule">true</Option>
           <Option name="add_mgmt_ssh_rule_when_stoped">False</Option>
           <Option name="add_rules_for_ipv6_neighbor_discovery">True</Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">True</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
           <Option name="classify_mark_terminating">False</Option>
           <Option name="clear_unknown_interfaces">False</Option>
           <Option name="cmdline">-xt</Option>
-          <Option name="compiler"></Option>
+          <Option name="compiler"/>
           <Option name="configure_bonding_interfaces">False</Option>
           <Option name="configure_bridge_interfaces">False</Option>
           <Option name="configure_interfaces">True</Option>
@@ -32801,7 +33635,7 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="drop_invalid">True</Option>
           <Option name="eliminate_duplicates">true</Option>
           <Option name="enable_ipv6">True</Option>
-          <Option name="epilog_script"></Option>
+          <Option name="epilog_script"/>
           <Option name="firewall_dir">/etc</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="freebsd_ip_forward">1</Option>
@@ -32811,34 +33645,34 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="iosacl_assume_fw_part_of_any">true</Option>
           <Option name="iosacl_include_comments">true</Option>
           <Option name="ipv4_6_order">ipv4_first</Option>
-          <Option name="limit_suffix"></Option>
+          <Option name="limit_suffix"/>
           <Option name="limit_value">0</Option>
-          <Option name="linux24_accept_redirects"></Option>
-          <Option name="linux24_accept_source_route"></Option>
-          <Option name="linux24_icmp_echo_ignore_all"></Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
-          <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
-          <Option name="linux24_ip_dynaddr"></Option>
+          <Option name="linux24_accept_redirects"/>
+          <Option name="linux24_accept_source_route"/>
+          <Option name="linux24_icmp_echo_ignore_all"/>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
+          <Option name="linux24_icmp_ignore_bogus_error_responses"/>
+          <Option name="linux24_ip_dynaddr"/>
           <Option name="linux24_ip_forward">1</Option>
           <Option name="linux24_ipv6_forward">1</Option>
-          <Option name="linux24_log_martians"></Option>
-          <Option name="linux24_path_ip"></Option>
-          <Option name="linux24_path_ip6tables"></Option>
-          <Option name="linux24_path_ip6tables_restore"></Option>
-          <Option name="linux24_path_iptables"></Option>
-          <Option name="linux24_path_iptables_restore"></Option>
-          <Option name="linux24_path_logger"></Option>
-          <Option name="linux24_path_lsmod"></Option>
-          <Option name="linux24_path_modprobe"></Option>
-          <Option name="linux24_rp_filter"></Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_log_martians"/>
+          <Option name="linux24_path_ip"/>
+          <Option name="linux24_path_ip6tables"/>
+          <Option name="linux24_path_ip6tables_restore"/>
+          <Option name="linux24_path_iptables"/>
+          <Option name="linux24_path_iptables_restore"/>
+          <Option name="linux24_path_logger"/>
+          <Option name="linux24_path_lsmod"/>
+          <Option name="linux24_path_modprobe"/>
+          <Option name="linux24_rp_filter"/>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">0</Option>
           <Option name="linux24_tcp_keepalive_interval">0</Option>
-          <Option name="linux24_tcp_sack"></Option>
-          <Option name="linux24_tcp_syncookies"></Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_sack"/>
+          <Option name="linux24_tcp_syncookies"/>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">True</Option>
           <Option name="local_nat">False</Option>
           <Option name="log_all">False</Option>
@@ -32855,7 +33689,7 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="mgmt_ssh">True</Option>
           <Option name="no_ipv6_default_policy">False</Option>
           <Option name="openbsd_ip_forward">1</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="pass_all_out">false</Option>
           <Option name="pf_limit_frags">5000</Option>
           <Option name="pf_limit_states">10000</Option>
@@ -32875,13 +33709,13 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="pix_syslog_device_id_supported">false</Option>
           <Option name="pix_use_acl_remarks">true</Option>
           <Option name="prolog_place">top</Option>
-          <Option name="prolog_script"></Option>
+          <Option name="prolog_script"/>
           <Option name="prompt1">$ </Option>
           <Option name="prompt2"> # </Option>
-          <Option name="scpArgs"></Option>
-          <Option name="script_name_on_firewall"></Option>
+          <Option name="scpArgs"/>
+          <Option name="script_name_on_firewall"/>
           <Option name="solaris_ip_forward">1</Option>
-          <Option name="sshArgs"></Option>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -33018,23 +33852,23 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
         <FirewallOptions>
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
-          <Option name="action_on_reject"></Option>
-          <Option name="activationCmd"></Option>
+          <Option name="action_on_reject"/>
+          <Option name="activationCmd"/>
           <Option name="add_check_state_rule">true</Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">False</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
           <Option name="classify_mark_terminating">False</Option>
-          <Option name="cmdline"></Option>
-          <Option name="compiler"></Option>
+          <Option name="cmdline"/>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="drop_invalid">False</Option>
           <Option name="eliminate_duplicates">true</Option>
           <Option name="enable_ipv6">False</Option>
-          <Option name="epilog_script"></Option>
+          <Option name="epilog_script"/>
           <Option name="firewall_dir">/etc</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="freebsd_ip_forward">1</Option>
@@ -33044,7 +33878,7 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="iosacl_assume_fw_part_of_any">true</Option>
           <Option name="iosacl_include_comments">true</Option>
           <Option name="ipv4_6_order">ipv4_first</Option>
-          <Option name="limit_suffix"></Option>
+          <Option name="limit_suffix"/>
           <Option name="limit_value">0</Option>
           <Option name="linux24_ip_forward">1</Option>
           <Option name="load_modules">True</Option>
@@ -33059,11 +33893,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="loopback_interface">lo0</Option>
           <Option name="macosx_ip_forward">1</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"></Option>
+          <Option name="mgmt_addr"/>
           <Option name="mgmt_ssh">False</Option>
           <Option name="no_ipv6_default_policy">False</Option>
           <Option name="openbsd_ip_forward">1</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="pass_all_out">false</Option>
           <Option name="pf_limit_frags">5000</Option>
           <Option name="pf_limit_states">10000</Option>
@@ -33083,11 +33917,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="pix_syslog_device_id_supported">false</Option>
           <Option name="pix_use_acl_remarks">true</Option>
           <Option name="prolog_place">top</Option>
-          <Option name="prolog_script"></Option>
+          <Option name="prolog_script"/>
           <Option name="prompt1">$ </Option>
           <Option name="prompt2"> # </Option>
           <Option name="solaris_ip_forward">1</Option>
-          <Option name="sshArgs"></Option>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -33119,29 +33953,29 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="branch_id">id37854X15403</Option>
-              <Option name="classify_str"></Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="classify_str"/>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_branch_in_mangle">False</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -33189,23 +34023,23 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
         <FirewallOptions>
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
-          <Option name="action_on_reject"></Option>
-          <Option name="activationCmd"></Option>
+          <Option name="action_on_reject"/>
+          <Option name="activationCmd"/>
           <Option name="add_check_state_rule">true</Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">False</Option>
           <Option name="clamp_mss_to_mtu">True</Option>
           <Option name="classify_mark_terminating">False</Option>
-          <Option name="cmdline"></Option>
-          <Option name="compiler"></Option>
+          <Option name="cmdline"/>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="drop_invalid">False</Option>
           <Option name="eliminate_duplicates">true</Option>
           <Option name="enable_ipv6">False</Option>
-          <Option name="epilog_script"></Option>
+          <Option name="epilog_script"/>
           <Option name="firewall_dir">/etc</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="freebsd_ip_forward">1</Option>
@@ -33214,36 +34048,36 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="iosacl_add_clear_statements">true</Option>
           <Option name="iosacl_assume_fw_part_of_any">true</Option>
           <Option name="iosacl_include_comments">true</Option>
-          <Option name="ipt_mangle_only_rulesets"></Option>
+          <Option name="ipt_mangle_only_rulesets"/>
           <Option name="ipv4_6_order">ipv4_first</Option>
-          <Option name="limit_suffix"></Option>
+          <Option name="limit_suffix"/>
           <Option name="limit_value">0</Option>
-          <Option name="linux24_accept_redirects"></Option>
-          <Option name="linux24_accept_source_route"></Option>
-          <Option name="linux24_icmp_echo_ignore_all"></Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
-          <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
-          <Option name="linux24_ip_dynaddr"></Option>
+          <Option name="linux24_accept_redirects"/>
+          <Option name="linux24_accept_source_route"/>
+          <Option name="linux24_icmp_echo_ignore_all"/>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
+          <Option name="linux24_icmp_ignore_bogus_error_responses"/>
+          <Option name="linux24_ip_dynaddr"/>
           <Option name="linux24_ip_forward">1</Option>
           <Option name="linux24_ipv6_forward">1</Option>
-          <Option name="linux24_log_martians"></Option>
-          <Option name="linux24_path_ip"></Option>
-          <Option name="linux24_path_ip6tables"></Option>
-          <Option name="linux24_path_ip6tables_restore"></Option>
-          <Option name="linux24_path_iptables"></Option>
-          <Option name="linux24_path_iptables_restore"></Option>
-          <Option name="linux24_path_logger"></Option>
-          <Option name="linux24_path_lsmod"></Option>
-          <Option name="linux24_path_modprobe"></Option>
-          <Option name="linux24_rp_filter"></Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_log_martians"/>
+          <Option name="linux24_path_ip"/>
+          <Option name="linux24_path_ip6tables"/>
+          <Option name="linux24_path_ip6tables_restore"/>
+          <Option name="linux24_path_iptables"/>
+          <Option name="linux24_path_iptables_restore"/>
+          <Option name="linux24_path_logger"/>
+          <Option name="linux24_path_lsmod"/>
+          <Option name="linux24_path_modprobe"/>
+          <Option name="linux24_rp_filter"/>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">0</Option>
           <Option name="linux24_tcp_keepalive_interval">0</Option>
-          <Option name="linux24_tcp_sack"></Option>
-          <Option name="linux24_tcp_syncookies"></Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_sack"/>
+          <Option name="linux24_tcp_syncookies"/>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">True</Option>
           <Option name="local_nat">False</Option>
           <Option name="log_all">False</Option>
@@ -33256,11 +34090,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="loopback_interface">lo0</Option>
           <Option name="macosx_ip_forward">1</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"></Option>
+          <Option name="mgmt_addr"/>
           <Option name="mgmt_ssh">False</Option>
           <Option name="no_ipv6_default_policy">False</Option>
           <Option name="openbsd_ip_forward">1</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="pass_all_out">false</Option>
           <Option name="pf_limit_frags">5000</Option>
           <Option name="pf_limit_states">10000</Option>
@@ -33280,11 +34114,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="pix_syslog_device_id_supported">false</Option>
           <Option name="pix_use_acl_remarks">true</Option>
           <Option name="prolog_place">top</Option>
-          <Option name="prolog_script"></Option>
+          <Option name="prolog_script"/>
           <Option name="prompt1">$ </Option>
           <Option name="prompt2"> # </Option>
           <Option name="solaris_ip_forward">1</Option>
-          <Option name="sshArgs"></Option>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -33372,14 +34206,14 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_level"></Option>
+              <Option name="log_level"/>
               <Option name="log_prefix">%R/%N -- %A</Option>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
@@ -33570,38 +34404,38 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">True</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
-          <Option name="cmdline"></Option>
-          <Option name="compiler"></Option>
+          <Option name="cmdline"/>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="dyn_addr">False</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="ignore_empty_groups">False</Option>
-          <Option name="ipt_mangle_only_rulesets"></Option>
+          <Option name="ipt_mangle_only_rulesets"/>
           <Option name="limit_suffix">/day</Option>
           <Option name="limit_value">0</Option>
-          <Option name="linux24_accept_redirects"></Option>
-          <Option name="linux24_accept_source_route"></Option>
-          <Option name="linux24_icmp_echo_ignore_all"></Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
-          <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
-          <Option name="linux24_ip_dynaddr"></Option>
-          <Option name="linux24_ip_forward"></Option>
-          <Option name="linux24_log_martians"></Option>
-          <Option name="linux24_path_ip"></Option>
-          <Option name="linux24_path_iptables"></Option>
-          <Option name="linux24_path_logger"></Option>
-          <Option name="linux24_path_lsmod"></Option>
-          <Option name="linux24_path_modprobe"></Option>
-          <Option name="linux24_rp_filter"></Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_accept_redirects"/>
+          <Option name="linux24_accept_source_route"/>
+          <Option name="linux24_icmp_echo_ignore_all"/>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
+          <Option name="linux24_icmp_ignore_bogus_error_responses"/>
+          <Option name="linux24_ip_dynaddr"/>
+          <Option name="linux24_ip_forward"/>
+          <Option name="linux24_log_martians"/>
+          <Option name="linux24_path_ip"/>
+          <Option name="linux24_path_iptables"/>
+          <Option name="linux24_path_logger"/>
+          <Option name="linux24_path_lsmod"/>
+          <Option name="linux24_path_modprobe"/>
+          <Option name="linux24_rp_filter"/>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">30</Option>
           <Option name="linux24_tcp_keepalive_interval">1800</Option>
-          <Option name="linux24_tcp_sack"></Option>
-          <Option name="linux24_tcp_syncookies"></Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_sack"/>
+          <Option name="linux24_tcp_syncookies"/>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">True</Option>
           <Option name="local_nat">False</Option>
           <Option name="log_all">False</Option>
@@ -33613,10 +34447,10 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">True</Option>
           <Option name="no_optimisation">False</Option>
-          <Option name="script_env_path"></Option>
-          <Option name="snmp_contact"></Option>
-          <Option name="snmp_description"></Option>
-          <Option name="snmp_location"></Option>
+          <Option name="script_env_path"/>
+          <Option name="snmp_contact"/>
+          <Option name="snmp_description"/>
+          <Option name="snmp_location"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -33647,31 +34481,31 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="branch_id">id48493B6E4626</Option>
               <Option name="branch_name">rule0_branch</Option>
-              <Option name="classify_str"></Option>
+              <Option name="classify_str"/>
               <Option name="color">#8BC065</Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_branch_in_mangle">False</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -33692,31 +34526,31 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="branch_id">id484B0A134626</Option>
               <Option name="branch_name">rule0_branch</Option>
-              <Option name="classify_str"></Option>
+              <Option name="classify_str"/>
               <Option name="color">#8BC065</Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_reply_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_branch_in_mangle">False</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_reply_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -33737,31 +34571,31 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="branch_id">id4848A4414626</Option>
               <Option name="branch_name">rule1_branch</Option>
-              <Option name="classify_str"></Option>
+              <Option name="classify_str"/>
               <Option name="color">#8BC065</Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_branch_in_mangle">False</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -33782,31 +34616,31 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="branch_id">id484B3D324626</Option>
               <Option name="branch_name">rule1_branch</Option>
-              <Option name="classify_str"></Option>
+              <Option name="classify_str"/>
               <Option name="color">#8BC065</Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_reply_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_branch_in_mangle">False</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_reply_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -33827,29 +34661,29 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="branch_id">id41960X1271</Option>
-              <Option name="classify_str"></Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="classify_str"/>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_branch_in_mangle">False</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -33926,51 +34760,51 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
           <Option name="action_on_reject">ICMP net unreachable</Option>
-          <Option name="activationCmd"></Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="activationCmd"/>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">False</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
           <Option name="classify_mark_terminating">False</Option>
-          <Option name="cmdline"></Option>
-          <Option name="compiler"></Option>
+          <Option name="cmdline"/>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">False</Option>
           <Option name="debug">False</Option>
           <Option name="drop_invalid">False</Option>
           <Option name="dyn_addr">False</Option>
-          <Option name="epilog_script"></Option>
-          <Option name="firewall_dir"></Option>
+          <Option name="epilog_script"/>
+          <Option name="firewall_dir"/>
           <Option name="firewall_is_part_of_any">True</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="ignore_empty_groups">False</Option>
-          <Option name="inst_cmdline"></Option>
-          <Option name="inst_script"></Option>
-          <Option name="install_script"></Option>
+          <Option name="inst_cmdline"/>
+          <Option name="inst_script"/>
+          <Option name="install_script"/>
           <Option name="limit_suffix">/day</Option>
           <Option name="limit_value">0</Option>
-          <Option name="linux24_accept_redirects"></Option>
-          <Option name="linux24_accept_source_route"></Option>
-          <Option name="linux24_icmp_echo_ignore_all"></Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
-          <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
-          <Option name="linux24_ip_dynaddr"></Option>
-          <Option name="linux24_ip_forward"></Option>
-          <Option name="linux24_log_martians"></Option>
-          <Option name="linux24_path_ip"></Option>
-          <Option name="linux24_path_iptables"></Option>
-          <Option name="linux24_path_logger"></Option>
-          <Option name="linux24_path_lsmod"></Option>
-          <Option name="linux24_path_modprobe"></Option>
-          <Option name="linux24_rp_filter"></Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_accept_redirects"/>
+          <Option name="linux24_accept_source_route"/>
+          <Option name="linux24_icmp_echo_ignore_all"/>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
+          <Option name="linux24_icmp_ignore_bogus_error_responses"/>
+          <Option name="linux24_ip_dynaddr"/>
+          <Option name="linux24_ip_forward"/>
+          <Option name="linux24_log_martians"/>
+          <Option name="linux24_path_ip"/>
+          <Option name="linux24_path_iptables"/>
+          <Option name="linux24_path_logger"/>
+          <Option name="linux24_path_lsmod"/>
+          <Option name="linux24_path_modprobe"/>
+          <Option name="linux24_rp_filter"/>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">30</Option>
           <Option name="linux24_tcp_keepalive_interval">1800</Option>
-          <Option name="linux24_tcp_sack"></Option>
-          <Option name="linux24_tcp_syncookies"></Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_sack"/>
+          <Option name="linux24_tcp_syncookies"/>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">False</Option>
           <Option name="local_nat">False</Option>
           <Option name="log_all">False</Option>
@@ -33980,25 +34814,25 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="log_level">debug</Option>
           <Option name="log_limit_suffix">/second</Option>
           <Option name="log_limit_value">0</Option>
-          <Option name="log_prefix"></Option>
+          <Option name="log_prefix"/>
           <Option name="log_tcp_opt">False</Option>
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">False</Option>
-          <Option name="mgmt_addr"></Option>
+          <Option name="mgmt_addr"/>
           <Option name="mgmt_ssh">False</Option>
           <Option name="no_iochains_for_any">False</Option>
           <Option name="no_ipv6_default_policy">False</Option>
           <Option name="no_optimisation">False</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="platform">iptables</Option>
           <Option name="prolog_place">top</Option>
-          <Option name="prolog_script"></Option>
+          <Option name="prolog_script"/>
           <Option name="proxy_arp">False</Option>
-          <Option name="script_env_path"></Option>
-          <Option name="snmp_contact"></Option>
-          <Option name="snmp_description"></Option>
-          <Option name="snmp_location"></Option>
-          <Option name="sshArgs"></Option>
+          <Option name="script_env_path"/>
+          <Option name="snmp_contact"/>
+          <Option name="snmp_description"/>
+          <Option name="snmp_location"/>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -34226,15 +35060,15 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">False</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -34442,23 +35276,23 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
         <FirewallOptions>
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
-          <Option name="action_on_reject"></Option>
-          <Option name="activationCmd"></Option>
+          <Option name="action_on_reject"/>
+          <Option name="activationCmd"/>
           <Option name="add_check_state_rule">true</Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">False</Option>
           <Option name="clamp_mss_to_mtu">True</Option>
           <Option name="classify_mark_terminating">False</Option>
-          <Option name="cmdline"></Option>
-          <Option name="compiler"></Option>
+          <Option name="cmdline"/>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="drop_invalid">False</Option>
           <Option name="eliminate_duplicates">true</Option>
           <Option name="enable_ipv6">False</Option>
-          <Option name="epilog_script"></Option>
+          <Option name="epilog_script"/>
           <Option name="firewall_dir">/etc</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="freebsd_ip_forward">1</Option>
@@ -34468,7 +35302,7 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="iosacl_assume_fw_part_of_any">true</Option>
           <Option name="iosacl_include_comments">true</Option>
           <Option name="ipv4_6_order">ipv4_first</Option>
-          <Option name="limit_suffix"></Option>
+          <Option name="limit_suffix"/>
           <Option name="limit_value">0</Option>
           <Option name="linux24_ip_forward">1</Option>
           <Option name="load_modules">True</Option>
@@ -34483,11 +35317,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="loopback_interface">lo0</Option>
           <Option name="macosx_ip_forward">1</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"></Option>
+          <Option name="mgmt_addr"/>
           <Option name="mgmt_ssh">False</Option>
           <Option name="no_ipv6_default_policy">False</Option>
           <Option name="openbsd_ip_forward">1</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="pass_all_out">false</Option>
           <Option name="pf_limit_frags">5000</Option>
           <Option name="pf_limit_states">10000</Option>
@@ -34507,12 +35341,12 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="pix_syslog_device_id_supported">false</Option>
           <Option name="pix_use_acl_remarks">true</Option>
           <Option name="prolog_place">top</Option>
-          <Option name="prolog_script"></Option>
+          <Option name="prolog_script"/>
           <Option name="prompt1">$ </Option>
           <Option name="prompt2"> # </Option>
-          <Option name="scpArgs"></Option>
+          <Option name="scpArgs"/>
           <Option name="solaris_ip_forward">1</Option>
-          <Option name="sshArgs"></Option>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -34608,23 +35442,23 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
         <FirewallOptions>
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
-          <Option name="action_on_reject"></Option>
-          <Option name="activationCmd"></Option>
+          <Option name="action_on_reject"/>
+          <Option name="activationCmd"/>
           <Option name="add_check_state_rule">true</Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">True</Option>
           <Option name="clamp_mss_to_mtu">True</Option>
           <Option name="classify_mark_terminating">False</Option>
-          <Option name="cmdline"></Option>
-          <Option name="compiler"></Option>
+          <Option name="cmdline"/>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="drop_invalid">False</Option>
           <Option name="eliminate_duplicates">true</Option>
           <Option name="enable_ipv6">False</Option>
-          <Option name="epilog_script"></Option>
+          <Option name="epilog_script"/>
           <Option name="firewall_dir">/etc</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="freebsd_ip_forward">1</Option>
@@ -34634,7 +35468,7 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="iosacl_assume_fw_part_of_any">true</Option>
           <Option name="iosacl_include_comments">true</Option>
           <Option name="ipv4_6_order">ipv4_first</Option>
-          <Option name="limit_suffix"></Option>
+          <Option name="limit_suffix"/>
           <Option name="limit_value">0</Option>
           <Option name="linux24_ip_forward">1</Option>
           <Option name="load_modules">True</Option>
@@ -34649,11 +35483,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="loopback_interface">lo0</Option>
           <Option name="macosx_ip_forward">1</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"></Option>
+          <Option name="mgmt_addr"/>
           <Option name="mgmt_ssh">False</Option>
           <Option name="no_ipv6_default_policy">False</Option>
           <Option name="openbsd_ip_forward">1</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="pass_all_out">false</Option>
           <Option name="pf_limit_frags">5000</Option>
           <Option name="pf_limit_states">10000</Option>
@@ -34673,11 +35507,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="pix_syslog_device_id_supported">false</Option>
           <Option name="pix_use_acl_remarks">true</Option>
           <Option name="prolog_place">top</Option>
-          <Option name="prolog_script"></Option>
+          <Option name="prolog_script"/>
           <Option name="prompt1">$ </Option>
           <Option name="prompt2"> # </Option>
           <Option name="solaris_ip_forward">1</Option>
-          <Option name="sshArgs"></Option>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -34708,6 +35542,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id30447X26784" disabled="False" group="" position="1" action="Translate" comment="">
@@ -34729,6 +35566,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id30461X26784" disabled="False" group="" position="2" action="Translate" comment="">
@@ -34750,6 +35590,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="tcp-SSH"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id30475X26784" disabled="False" group="" position="3" action="Translate" comment="">
@@ -34771,6 +35614,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id76714X13110" disabled="False" group="" position="4" action="Translate" comment="">
@@ -34793,6 +35639,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <RuleSetOptions/>
@@ -34953,7 +35802,7 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id30296X26784" disabled="False" group="" log="False" position="8" action="Accept" direction="Both" comment="">
@@ -35177,11 +36026,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
-              <Option name="id"></Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="action_on_reject"/>
+              <Option name="id"/>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -35215,59 +36064,59 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">False</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
-          <Option name="cmdline"></Option>
-          <Option name="compiler"></Option>
+          <Option name="cmdline"/>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="dyn_addr">False</Option>
           <Option name="firewall_is_part_of_any">True</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
-          <Option name="id"></Option>
+          <Option name="id"/>
           <Option name="ignore_empty_groups">False</Option>
-          <Option name="install_script"></Option>
+          <Option name="install_script"/>
           <Option name="limit_suffix">/day</Option>
           <Option name="limit_value">0</Option>
-          <Option name="linux24_accept_redirects"></Option>
-          <Option name="linux24_accept_source_route"></Option>
-          <Option name="linux24_icmp_echo_ignore_all"></Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
-          <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
-          <Option name="linux24_ip_dynaddr"></Option>
-          <Option name="linux24_ip_forward"></Option>
-          <Option name="linux24_log_martians"></Option>
-          <Option name="linux24_path_ip"></Option>
-          <Option name="linux24_path_iptables"></Option>
-          <Option name="linux24_path_logger"></Option>
-          <Option name="linux24_path_lsmod"></Option>
-          <Option name="linux24_path_modprobe"></Option>
-          <Option name="linux24_rp_filter"></Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_accept_redirects"/>
+          <Option name="linux24_accept_source_route"/>
+          <Option name="linux24_icmp_echo_ignore_all"/>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
+          <Option name="linux24_icmp_ignore_bogus_error_responses"/>
+          <Option name="linux24_ip_dynaddr"/>
+          <Option name="linux24_ip_forward"/>
+          <Option name="linux24_log_martians"/>
+          <Option name="linux24_path_ip"/>
+          <Option name="linux24_path_iptables"/>
+          <Option name="linux24_path_logger"/>
+          <Option name="linux24_path_lsmod"/>
+          <Option name="linux24_path_modprobe"/>
+          <Option name="linux24_rp_filter"/>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">30</Option>
           <Option name="linux24_tcp_keepalive_interval">1800</Option>
-          <Option name="linux24_tcp_sack"></Option>
-          <Option name="linux24_tcp_syncookies"></Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_sack"/>
+          <Option name="linux24_tcp_syncookies"/>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">False</Option>
           <Option name="local_nat">False</Option>
           <Option name="log_all">False</Option>
           <Option name="log_all_dropped">False</Option>
           <Option name="log_ip_opt">False</Option>
-          <Option name="log_level"></Option>
-          <Option name="log_limit_suffix"></Option>
+          <Option name="log_level"/>
+          <Option name="log_limit_suffix"/>
           <Option name="log_limit_value">0</Option>
-          <Option name="log_prefix"></Option>
+          <Option name="log_prefix"/>
           <Option name="log_tcp_opt">False</Option>
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">True</Option>
           <Option name="no_iochains_for_any">False</Option>
           <Option name="no_optimisation">False</Option>
           <Option name="platform">iptables</Option>
-          <Option name="script_env_path"></Option>
-          <Option name="snmp_contact"></Option>
-          <Option name="snmp_description"></Option>
-          <Option name="snmp_location"></Option>
+          <Option name="script_env_path"/>
+          <Option name="snmp_contact"/>
+          <Option name="snmp_description"/>
+          <Option name="snmp_location"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -35297,8 +36146,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id31430X1798" disabled="False" group="" position="1" action="Translate" comment="">
@@ -35321,8 +36173,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id31445X1798" disabled="False" group="" position="2" action="Translate" comment="">
@@ -35347,8 +36202,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id31462X1798" disabled="False" group="" position="3" action="Translate" comment="">
@@ -35370,8 +36228,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id31476X1798" disabled="False" group="" position="4" action="Translate" comment="">
@@ -35393,8 +36254,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id31490X1798" disabled="False" group="" position="5" action="Translate" comment="">
@@ -35416,8 +36280,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id31504X1798" disabled="False" group="" position="6" action="Translate" comment="">
@@ -35439,8 +36306,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id31518X1798" disabled="False" group="" position="7" action="Translate" comment="">
@@ -35462,8 +36332,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id31532X1798" disabled="False" group="" position="8" action="Translate" comment="">
@@ -35486,6 +36359,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id31547X1798" disabled="False" group="" position="9" action="Translate" comment="">
@@ -35511,6 +36387,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id31565X1798" disabled="False" group="" position="10" action="Translate" comment="">
@@ -35534,6 +36413,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id31581X1798" disabled="False" group="" position="11" action="Translate" comment="">
@@ -35559,6 +36441,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id31599X1798" disabled="False" group="" position="12" action="Translate" comment="">
@@ -35582,6 +36467,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id31615X1798" disabled="False" group="" position="13" action="Translate" comment="">
@@ -35604,6 +36492,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id31630X1798" disabled="False" group="" position="14" action="Translate" comment="">
@@ -35627,6 +36518,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id31646X1798" disabled="True" group="" position="15" action="Translate" comment="">
@@ -35649,6 +36543,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id31661X1798" disabled="False" group="" position="16" action="Translate" comment="">
@@ -35671,6 +36568,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id31676X1798" disabled="False" group="" position="17" action="Translate" comment="">
@@ -35692,6 +36592,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id31690X1798" disabled="False" group="" position="18" action="Translate" comment="">
@@ -35713,8 +36616,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id31704X1798" disabled="False" group="" position="19" action="Translate" comment="">
@@ -35736,6 +36642,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id31718X1798" disabled="False" group="" position="20" action="Translate" comment="">
@@ -35757,6 +36666,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id31732X1798" disabled="False" group="" position="21" action="Translate" comment="NETMAP ">
@@ -35778,6 +36690,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id31746X1798" disabled="False" group="" position="22" action="Translate" comment="NETMAP">
@@ -35799,6 +36714,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id31760X1798" disabled="False" group="" position="23" action="Translate" comment="">
@@ -35820,6 +36738,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="id3B20468D"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id31774X1798" disabled="False" group="" position="24" action="Translate" comment="">
@@ -35842,6 +36763,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id31789X1798" disabled="False" group="" position="25" action="Translate" comment="">
@@ -35863,6 +36787,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="tcp-SMTP"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id31803X1798" disabled="False" group="" position="26" action="Translate" comment="">
@@ -35885,6 +36812,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="id3B4FF09A"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id31818X1798" disabled="False" group="" position="27" action="Translate" comment="">
@@ -35906,6 +36836,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id31832X1798" disabled="False" group="" position="28" action="Translate" comment="">
@@ -35931,6 +36864,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id31850X1798" disabled="False" group="" position="29" action="Translate" comment="transparent proxy rule">
@@ -35952,6 +36888,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id31864X1798" disabled="True" group="" position="30" action="Translate" comment="">
@@ -35974,6 +36913,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id31879X1798" disabled="False" group="" position="31" action="Translate" comment="">
@@ -35995,6 +36937,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="id3DDDE4E4"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id31893X1798" disabled="False" group="" position="32" action="Translate" comment="">
@@ -36016,6 +36961,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="id3DDDE4E4"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id31907X1798" disabled="False" group="" position="33" action="Translate" comment="">
@@ -36037,6 +36985,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id31921X1798" disabled="False" group="" position="34" action="Translate" comment="">
@@ -36058,6 +37009,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="id3B4FF09A"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id31935X1798" disabled="False" group="" position="35" action="Translate" comment="">
@@ -36079,6 +37033,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="id3B4FF09A"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id31949X1798" disabled="False" group="" position="36" action="Translate" comment="">
@@ -36100,6 +37057,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id31963X1798" disabled="False" group="" position="37" action="Translate" comment="">
@@ -36121,6 +37081,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="id3B4FF09A"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id31977X1798" disabled="False" group="" position="38" action="Translate" comment="this is the &quot;exception&quot; rule&#10;used in support req. originally">
@@ -36142,6 +37105,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
               <Option name="color">#C08B5A</Option>
             </NATRuleOptions>
@@ -36165,6 +37131,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="id3B4FF09A"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
               <Option name="color">#C08B5A</Option>
             </NATRuleOptions>
@@ -36188,6 +37157,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
               <Option name="color">#8BC065</Option>
             </NATRuleOptions>
@@ -36211,6 +37183,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="id3B4FF09A"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
               <Option name="color">#8BC065</Option>
             </NATRuleOptions>
@@ -36234,6 +37209,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="id3B4FF09A"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
               <Option name="color">#8BC065</Option>
             </NATRuleOptions>
@@ -36257,6 +37235,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="id3B4FF09A"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
               <Option name="color">#8BC065</Option>
             </NATRuleOptions>
@@ -36280,6 +37261,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
               <Option name="color">#C0BA44</Option>
             </NATRuleOptions>
@@ -36303,6 +37287,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="id3B4FF09A"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
               <Option name="color">#C0BA44</Option>
             </NATRuleOptions>
@@ -36328,8 +37315,8 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="action_on_reject"/>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="log_prefix">Iface: %I RULE %N -- %A **</Option>
               <Option name="stateless">True</Option>
@@ -36353,8 +37340,8 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="action_on_reject"/>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="log_prefix">Iface: %I RULE %N -- %A **</Option>
               <Option name="stateless">True</Option>
@@ -36377,20 +37364,20 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="connlimit_masklen">0</Option>
               <Option name="connlimit_value">0</Option>
               <Option name="firewall_is_part_of_any_and_networks">False</Option>
               <Option name="hashlimit_burst">0</Option>
               <Option name="hashlimit_dstlimit">False</Option>
               <Option name="hashlimit_mode">dstip</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -36413,20 +37400,20 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="connlimit_masklen">0</Option>
               <Option name="connlimit_value">0</Option>
               <Option name="firewall_is_part_of_any_and_networks">False</Option>
               <Option name="hashlimit_burst">0</Option>
               <Option name="hashlimit_dstlimit">False</Option>
               <Option name="hashlimit_mode">dstip</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -36525,7 +37512,7 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -36547,7 +37534,7 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             </When>
             <PolicyRuleOptions>
               <Option name="action_on_reject">TCP RST</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="log_prefix">IDENT</Option>
               <Option name="stateless">True</Option>
@@ -36572,9 +37559,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <PolicyRuleOptions>
               <Option name="action_on_reject">TCP RST</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -36923,11 +37910,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="limit_burst">10</Option>
               <Option name="limit_suffix">/minute</Option>
               <Option name="limit_value">5</Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_prefix"/>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -36966,7 +37953,7 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -37006,53 +37993,53 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">False</Option>
           <Option name="action_on_reject">ICMP net unreachable</Option>
-          <Option name="activationCmd"></Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="activationCmd"/>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">True</Option>
           <Option name="clamp_mss_to_mtu">True</Option>
           <Option name="classify_mark_terminating">False</Option>
-          <Option name="cmdline"></Option>
-          <Option name="compiler"></Option>
+          <Option name="cmdline"/>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="drop_invalid">True</Option>
           <Option name="dyn_addr">False</Option>
-          <Option name="epilog_script"></Option>
-          <Option name="firewall_dir"></Option>
+          <Option name="epilog_script"/>
+          <Option name="firewall_dir"/>
           <Option name="firewall_is_part_of_any">True</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
-          <Option name="id"></Option>
+          <Option name="id"/>
           <Option name="ignore_empty_groups">False</Option>
-          <Option name="inst_cmdline"></Option>
-          <Option name="inst_script"></Option>
-          <Option name="install_script"></Option>
+          <Option name="inst_cmdline"/>
+          <Option name="inst_script"/>
+          <Option name="install_script"/>
           <Option name="ipv4_6_order">ipv4_first</Option>
           <Option name="limit_suffix">/second</Option>
           <Option name="limit_value">5</Option>
           <Option name="linux24_accept_redirects">0</Option>
           <Option name="linux24_accept_source_route">0</Option>
           <Option name="linux24_icmp_echo_ignore_all">1</Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
           <Option name="linux24_icmp_ignore_bogus_error_responses">1</Option>
-          <Option name="linux24_ip_dynaddr"></Option>
+          <Option name="linux24_ip_dynaddr"/>
           <Option name="linux24_ip_forward">1</Option>
           <Option name="linux24_log_martians">1</Option>
-          <Option name="linux24_path_ip"></Option>
-          <Option name="linux24_path_iptables"></Option>
-          <Option name="linux24_path_logger"></Option>
-          <Option name="linux24_path_lsmod"></Option>
-          <Option name="linux24_path_modprobe"></Option>
+          <Option name="linux24_path_ip"/>
+          <Option name="linux24_path_iptables"/>
+          <Option name="linux24_path_logger"/>
+          <Option name="linux24_path_lsmod"/>
+          <Option name="linux24_path_modprobe"/>
           <Option name="linux24_rp_filter">1</Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">30</Option>
           <Option name="linux24_tcp_keepalive_interval">1800</Option>
-          <Option name="linux24_tcp_sack"></Option>
-          <Option name="linux24_tcp_syncookies"></Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_sack"/>
+          <Option name="linux24_tcp_syncookies"/>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">False</Option>
           <Option name="local_nat">True</Option>
           <Option name="log_all">False</Option>
@@ -37066,22 +38053,22 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="log_tcp_opt">False</Option>
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"></Option>
+          <Option name="mgmt_addr"/>
           <Option name="mgmt_ssh">False</Option>
           <Option name="no_iochains_for_any">False</Option>
           <Option name="no_ipv6_default_policy">False</Option>
           <Option name="no_optimisation">False</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="platform">iptables</Option>
           <Option name="prolog_place">after_flush</Option>
-          <Option name="prolog_script"></Option>
+          <Option name="prolog_script"/>
           <Option name="proxy_arp">True</Option>
-          <Option name="scpArgs"></Option>
-          <Option name="script_env_path"></Option>
-          <Option name="snmp_contact"></Option>
-          <Option name="snmp_description"></Option>
-          <Option name="snmp_location"></Option>
-          <Option name="sshArgs"></Option>
+          <Option name="scpArgs"/>
+          <Option name="script_env_path"/>
+          <Option name="snmp_contact"/>
+          <Option name="snmp_description"/>
+          <Option name="snmp_location"/>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -37114,8 +38101,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id32386X1798" disabled="False" group="" position="1" action="Translate" comment="">
@@ -37138,8 +38128,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id32401X1798" disabled="False" group="" position="2" action="Translate" comment="">
@@ -37164,8 +38157,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id32418X1798" disabled="False" group="" position="3" action="Translate" comment="">
@@ -37187,8 +38183,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id32432X1798" disabled="False" group="" position="4" action="Translate" comment="">
@@ -37210,8 +38209,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id32446X1798" disabled="False" group="" position="5" action="Translate" comment="">
@@ -37233,8 +38235,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id32460X1798" disabled="False" group="" position="6" action="Translate" comment="">
@@ -37256,8 +38261,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id32474X1798" disabled="False" group="" position="7" action="Translate" comment="">
@@ -37279,8 +38287,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id32488X1798" disabled="False" group="" position="8" action="Translate" comment="">
@@ -37303,6 +38314,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id32503X1798" disabled="False" group="" position="9" action="Translate" comment="">
@@ -37328,6 +38342,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id32521X1798" disabled="False" group="" position="10" action="Translate" comment="">
@@ -37351,6 +38368,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id32537X1798" disabled="False" group="" position="11" action="Translate" comment="">
@@ -37376,6 +38396,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id32555X1798" disabled="False" group="" position="12" action="Translate" comment="">
@@ -37399,6 +38422,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id32571X1798" disabled="False" group="" position="13" action="Translate" comment="">
@@ -37421,6 +38447,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id32586X1798" disabled="False" group="" position="14" action="Translate" comment="">
@@ -37444,6 +38473,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id32602X1798" disabled="True" group="" position="15" action="Translate" comment="">
@@ -37466,6 +38498,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id32617X1798" disabled="False" group="" position="16" action="Translate" comment="">
@@ -37488,6 +38523,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id32632X1798" disabled="False" group="" position="17" action="Translate" comment="">
@@ -37509,6 +38547,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id32646X1798" disabled="False" group="" position="18" action="Translate" comment="">
@@ -37530,8 +38571,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id32660X1798" disabled="False" group="" position="19" action="Translate" comment="">
@@ -37553,6 +38597,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id32674X1798" disabled="False" group="" position="20" action="Translate" comment="">
@@ -37574,6 +38621,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id32688X1798" disabled="False" group="" position="21" action="Translate" comment="NETMAP ">
@@ -37595,6 +38645,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id32702X1798" disabled="False" group="" position="22" action="Translate" comment="NETMAP">
@@ -37616,6 +38669,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id32716X1798" disabled="False" group="" position="23" action="Translate" comment="">
@@ -37637,6 +38693,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="id3B20468D"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id32730X1798" disabled="False" group="" position="24" action="Translate" comment="">
@@ -37659,6 +38718,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id32745X1798" disabled="False" group="" position="25" action="Translate" comment="">
@@ -37680,6 +38742,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="tcp-SMTP"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id32759X1798" disabled="False" group="" position="26" action="Translate" comment="">
@@ -37702,6 +38767,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="id3B4FF09A"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id32774X1798" disabled="False" group="" position="27" action="Translate" comment="">
@@ -37723,6 +38791,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id32788X1798" disabled="False" group="" position="28" action="Translate" comment="">
@@ -37748,6 +38819,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id32806X1798" disabled="False" group="" position="29" action="Translate" comment="transparent proxy rule">
@@ -37769,6 +38843,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id32820X1798" disabled="True" group="" position="30" action="Translate" comment="">
@@ -37791,6 +38868,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id32835X1798" disabled="False" group="" position="31" action="Translate" comment="">
@@ -37812,6 +38892,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="id3DDDE4E4"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id32849X1798" disabled="False" group="" position="32" action="Translate" comment="">
@@ -37833,6 +38916,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="id3DDDE4E4"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id32863X1798" disabled="False" group="" position="33" action="Translate" comment="">
@@ -37854,6 +38940,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id32877X1798" disabled="False" group="" position="34" action="Translate" comment="">
@@ -37875,6 +38964,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="id3B4FF09A"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id32891X1798" disabled="False" group="" position="35" action="Translate" comment="">
@@ -37896,6 +38988,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="id3B4FF09A"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id32905X1798" disabled="False" group="" position="36" action="Translate" comment="">
@@ -37917,6 +39012,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id32919X1798" disabled="False" group="" position="37" action="Translate" comment="">
@@ -37938,6 +39036,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="id3B4FF09A"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id32933X1798" disabled="False" group="" position="38" action="Translate" comment="this is the &quot;exception&quot; rule&#10;used in support req. originally">
@@ -37959,6 +39060,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
               <Option name="color">#C08B5A</Option>
             </NATRuleOptions>
@@ -37982,6 +39086,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="id3B4FF09A"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
               <Option name="color">#C08B5A</Option>
             </NATRuleOptions>
@@ -38005,6 +39112,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
               <Option name="color">#8BC065</Option>
             </NATRuleOptions>
@@ -38028,6 +39138,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="id3B4FF09A"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
               <Option name="color">#8BC065</Option>
             </NATRuleOptions>
@@ -38051,6 +39164,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="id3B4FF09A"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
               <Option name="color">#8BC065</Option>
             </NATRuleOptions>
@@ -38074,6 +39190,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="id3B4FF09A"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
               <Option name="color">#8BC065</Option>
             </NATRuleOptions>
@@ -38097,6 +39216,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
               <Option name="color">#C0BA44</Option>
             </NATRuleOptions>
@@ -38120,6 +39242,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="id3B4FF09A"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
               <Option name="color">#C0BA44</Option>
             </NATRuleOptions>
@@ -38145,8 +39270,8 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="action_on_reject"/>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="log_prefix">Iface: %I RULE %N -- %A **</Option>
               <Option name="stateless">True</Option>
@@ -38170,8 +39295,8 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="action_on_reject"/>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="log_prefix">Iface: %I RULE %N -- %A **</Option>
               <Option name="stateless">True</Option>
@@ -38194,20 +39319,20 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="connlimit_masklen">0</Option>
               <Option name="connlimit_value">0</Option>
               <Option name="firewall_is_part_of_any_and_networks">False</Option>
               <Option name="hashlimit_burst">0</Option>
               <Option name="hashlimit_dstlimit">False</Option>
               <Option name="hashlimit_mode">dstip</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -38230,20 +39355,20 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="connlimit_masklen">0</Option>
               <Option name="connlimit_value">0</Option>
               <Option name="firewall_is_part_of_any_and_networks">False</Option>
               <Option name="hashlimit_burst">0</Option>
               <Option name="hashlimit_dstlimit">False</Option>
               <Option name="hashlimit_mode">dstip</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -38342,7 +39467,7 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -38364,7 +39489,7 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             </When>
             <PolicyRuleOptions>
               <Option name="action_on_reject">TCP RST</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="log_prefix">IDENT</Option>
               <Option name="stateless">True</Option>
@@ -38389,9 +39514,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <PolicyRuleOptions>
               <Option name="action_on_reject">TCP RST</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -38740,11 +39865,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="limit_burst">10</Option>
               <Option name="limit_suffix">/minute</Option>
               <Option name="limit_value">5</Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_prefix"/>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -38783,7 +39908,7 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -38823,53 +39948,53 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">False</Option>
           <Option name="action_on_reject">ICMP net unreachable</Option>
-          <Option name="activationCmd"></Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="activationCmd"/>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">True</Option>
           <Option name="clamp_mss_to_mtu">True</Option>
           <Option name="classify_mark_terminating">False</Option>
-          <Option name="cmdline"></Option>
-          <Option name="compiler"></Option>
+          <Option name="cmdline"/>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="drop_invalid">True</Option>
           <Option name="dyn_addr">False</Option>
-          <Option name="epilog_script"></Option>
-          <Option name="firewall_dir"></Option>
+          <Option name="epilog_script"/>
+          <Option name="firewall_dir"/>
           <Option name="firewall_is_part_of_any">True</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
-          <Option name="id"></Option>
+          <Option name="id"/>
           <Option name="ignore_empty_groups">False</Option>
-          <Option name="inst_cmdline"></Option>
-          <Option name="inst_script"></Option>
-          <Option name="install_script"></Option>
+          <Option name="inst_cmdline"/>
+          <Option name="inst_script"/>
+          <Option name="install_script"/>
           <Option name="ipv4_6_order">ipv4_first</Option>
           <Option name="limit_suffix">/second</Option>
           <Option name="limit_value">5</Option>
           <Option name="linux24_accept_redirects">0</Option>
           <Option name="linux24_accept_source_route">0</Option>
           <Option name="linux24_icmp_echo_ignore_all">1</Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
           <Option name="linux24_icmp_ignore_bogus_error_responses">1</Option>
-          <Option name="linux24_ip_dynaddr"></Option>
+          <Option name="linux24_ip_dynaddr"/>
           <Option name="linux24_ip_forward">1</Option>
           <Option name="linux24_log_martians">1</Option>
-          <Option name="linux24_path_ip"></Option>
-          <Option name="linux24_path_iptables"></Option>
-          <Option name="linux24_path_logger"></Option>
-          <Option name="linux24_path_lsmod"></Option>
-          <Option name="linux24_path_modprobe"></Option>
+          <Option name="linux24_path_ip"/>
+          <Option name="linux24_path_iptables"/>
+          <Option name="linux24_path_logger"/>
+          <Option name="linux24_path_lsmod"/>
+          <Option name="linux24_path_modprobe"/>
           <Option name="linux24_rp_filter">1</Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">30</Option>
           <Option name="linux24_tcp_keepalive_interval">1800</Option>
-          <Option name="linux24_tcp_sack"></Option>
-          <Option name="linux24_tcp_syncookies"></Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_sack"/>
+          <Option name="linux24_tcp_syncookies"/>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">False</Option>
           <Option name="local_nat">True</Option>
           <Option name="log_all">False</Option>
@@ -38883,22 +40008,22 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="log_tcp_opt">False</Option>
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"></Option>
+          <Option name="mgmt_addr"/>
           <Option name="mgmt_ssh">False</Option>
           <Option name="no_iochains_for_any">False</Option>
           <Option name="no_ipv6_default_policy">False</Option>
           <Option name="no_optimisation">False</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="platform">iptables</Option>
           <Option name="prolog_place">after_flush</Option>
-          <Option name="prolog_script"></Option>
+          <Option name="prolog_script"/>
           <Option name="proxy_arp">True</Option>
-          <Option name="scpArgs"></Option>
-          <Option name="script_env_path"></Option>
-          <Option name="snmp_contact"></Option>
-          <Option name="snmp_description"></Option>
-          <Option name="snmp_location"></Option>
-          <Option name="sshArgs"></Option>
+          <Option name="scpArgs"/>
+          <Option name="script_env_path"/>
+          <Option name="snmp_contact"/>
+          <Option name="snmp_description"/>
+          <Option name="snmp_location"/>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -38931,8 +40056,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id35379X1833" disabled="False" group="" position="1" action="Translate" comment="">
@@ -38955,8 +40083,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id35394X1833" disabled="False" group="" position="2" action="Translate" comment="">
@@ -38981,8 +40112,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id35411X1833" disabled="False" group="" position="3" action="Translate" comment="">
@@ -39004,8 +40138,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id35425X1833" disabled="False" group="" position="4" action="Translate" comment="">
@@ -39027,8 +40164,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id35439X1833" disabled="False" group="" position="5" action="Translate" comment="">
@@ -39050,8 +40190,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id35453X1833" disabled="False" group="" position="6" action="Translate" comment="">
@@ -39073,8 +40216,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id35467X1833" disabled="False" group="" position="7" action="Translate" comment="">
@@ -39096,8 +40242,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id35481X1833" disabled="False" group="" position="8" action="Translate" comment="">
@@ -39120,6 +40269,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id35496X1833" disabled="False" group="" position="9" action="Translate" comment="">
@@ -39145,6 +40297,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id35514X1833" disabled="False" group="" position="10" action="Translate" comment="">
@@ -39168,6 +40323,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id35530X1833" disabled="False" group="" position="11" action="Translate" comment="">
@@ -39193,6 +40351,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id35548X1833" disabled="False" group="" position="12" action="Translate" comment="">
@@ -39216,6 +40377,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id35564X1833" disabled="False" group="" position="13" action="Translate" comment="">
@@ -39238,6 +40402,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id35579X1833" disabled="False" group="" position="14" action="Translate" comment="">
@@ -39261,6 +40428,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id35595X1833" disabled="True" group="" position="15" action="Translate" comment="">
@@ -39283,6 +40453,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id35610X1833" disabled="False" group="" position="16" action="Translate" comment="">
@@ -39305,6 +40478,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id35625X1833" disabled="False" group="" position="17" action="Translate" comment="">
@@ -39326,6 +40502,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id35639X1833" disabled="False" group="" position="18" action="Translate" comment="">
@@ -39347,8 +40526,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id35653X1833" disabled="False" group="" position="19" action="Translate" comment="">
@@ -39370,6 +40552,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id35667X1833" disabled="False" group="" position="20" action="Translate" comment="">
@@ -39391,6 +40576,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id35681X1833" disabled="False" group="" position="21" action="Translate" comment="NETMAP ">
@@ -39412,6 +40600,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id35695X1833" disabled="False" group="" position="22" action="Translate" comment="NETMAP">
@@ -39433,6 +40624,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id35709X1833" disabled="False" group="" position="23" action="Translate" comment="">
@@ -39454,6 +40648,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="id3B20468D"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id35723X1833" disabled="False" group="" position="24" action="Translate" comment="">
@@ -39476,6 +40673,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id35738X1833" disabled="False" group="" position="25" action="Translate" comment="">
@@ -39497,6 +40697,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="tcp-SMTP"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id35752X1833" disabled="False" group="" position="26" action="Translate" comment="">
@@ -39519,6 +40722,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="id3B4FF09A"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id35767X1833" disabled="False" group="" position="27" action="Translate" comment="">
@@ -39540,6 +40746,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id35781X1833" disabled="False" group="" position="28" action="Translate" comment="">
@@ -39565,6 +40774,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id35799X1833" disabled="False" group="" position="29" action="Translate" comment="transparent proxy rule">
@@ -39586,6 +40798,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id35813X1833" disabled="True" group="" position="30" action="Translate" comment="">
@@ -39608,6 +40823,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id35828X1833" disabled="False" group="" position="31" action="Translate" comment="">
@@ -39629,6 +40847,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="id3DDDE4E4"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id35842X1833" disabled="False" group="" position="32" action="Translate" comment="">
@@ -39650,6 +40871,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="id3DDDE4E4"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id35856X1833" disabled="False" group="" position="33" action="Translate" comment="">
@@ -39671,6 +40895,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id35870X1833" disabled="False" group="" position="34" action="Translate" comment="">
@@ -39692,6 +40919,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="id3B4FF09A"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id35884X1833" disabled="False" group="" position="35" action="Translate" comment="">
@@ -39713,6 +40943,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="id3B4FF09A"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id35898X1833" disabled="False" group="" position="36" action="Translate" comment="">
@@ -39734,6 +40967,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id35912X1833" disabled="False" group="" position="37" action="Translate" comment="">
@@ -39755,6 +40991,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="id3B4FF09A"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id35926X1833" disabled="False" group="" position="38" action="Translate" comment="this is the &quot;exception&quot; rule&#10;used in support req. originally">
@@ -39776,6 +41015,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
               <Option name="color">#C08B5A</Option>
             </NATRuleOptions>
@@ -39799,6 +41041,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="id3B4FF09A"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
               <Option name="color">#C08B5A</Option>
             </NATRuleOptions>
@@ -39822,6 +41067,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
               <Option name="color">#8BC065</Option>
             </NATRuleOptions>
@@ -39845,6 +41093,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="id3B4FF09A"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
               <Option name="color">#8BC065</Option>
             </NATRuleOptions>
@@ -39868,6 +41119,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="id3B4FF09A"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
               <Option name="color">#8BC065</Option>
             </NATRuleOptions>
@@ -39891,6 +41145,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="id3B4FF09A"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
               <Option name="color">#8BC065</Option>
             </NATRuleOptions>
@@ -39914,6 +41171,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
               <Option name="color">#C0BA44</Option>
             </NATRuleOptions>
@@ -39937,6 +41197,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="id3B4FF09A"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
               <Option name="color">#C0BA44</Option>
             </NATRuleOptions>
@@ -39962,8 +41225,8 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="action_on_reject"/>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="log_prefix">Iface: %I RULE %N -- %A **</Option>
               <Option name="stateless">True</Option>
@@ -39987,8 +41250,8 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="action_on_reject"/>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="log_prefix">Iface: %I RULE %N -- %A **</Option>
               <Option name="stateless">True</Option>
@@ -40011,20 +41274,20 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="connlimit_masklen">0</Option>
               <Option name="connlimit_value">0</Option>
               <Option name="firewall_is_part_of_any_and_networks">False</Option>
               <Option name="hashlimit_burst">0</Option>
               <Option name="hashlimit_dstlimit">False</Option>
               <Option name="hashlimit_mode">dstip</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -40047,20 +41310,20 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="connlimit_masklen">0</Option>
               <Option name="connlimit_value">0</Option>
               <Option name="firewall_is_part_of_any_and_networks">False</Option>
               <Option name="hashlimit_burst">0</Option>
               <Option name="hashlimit_dstlimit">False</Option>
               <Option name="hashlimit_mode">dstip</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -40159,7 +41422,7 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -40181,7 +41444,7 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             </When>
             <PolicyRuleOptions>
               <Option name="action_on_reject">TCP RST</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="log_prefix">IDENT</Option>
               <Option name="stateless">True</Option>
@@ -40206,9 +41469,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <PolicyRuleOptions>
               <Option name="action_on_reject">TCP RST</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -40345,11 +41608,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="limit_burst">10</Option>
               <Option name="limit_suffix">/minute</Option>
               <Option name="limit_value">5</Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_prefix"/>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -40388,7 +41651,7 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -40428,52 +41691,52 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">False</Option>
           <Option name="action_on_reject">ICMP net unreachable</Option>
-          <Option name="activationCmd"></Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="activationCmd"/>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">False</Option>
           <Option name="clamp_mss_to_mtu">True</Option>
           <Option name="classify_mark_terminating">False</Option>
-          <Option name="cmdline"></Option>
-          <Option name="compiler"></Option>
+          <Option name="cmdline"/>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="drop_invalid">True</Option>
           <Option name="dyn_addr">False</Option>
-          <Option name="epilog_script"></Option>
-          <Option name="firewall_dir"></Option>
+          <Option name="epilog_script"/>
+          <Option name="firewall_dir"/>
           <Option name="firewall_is_part_of_any">True</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
-          <Option name="id"></Option>
+          <Option name="id"/>
           <Option name="ignore_empty_groups">False</Option>
-          <Option name="inst_cmdline"></Option>
-          <Option name="inst_script"></Option>
-          <Option name="install_script"></Option>
+          <Option name="inst_cmdline"/>
+          <Option name="inst_script"/>
+          <Option name="install_script"/>
           <Option name="limit_suffix">/second</Option>
           <Option name="limit_value">5</Option>
           <Option name="linux24_accept_redirects">0</Option>
           <Option name="linux24_accept_source_route">0</Option>
           <Option name="linux24_icmp_echo_ignore_all">1</Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
           <Option name="linux24_icmp_ignore_bogus_error_responses">1</Option>
-          <Option name="linux24_ip_dynaddr"></Option>
+          <Option name="linux24_ip_dynaddr"/>
           <Option name="linux24_ip_forward">1</Option>
           <Option name="linux24_log_martians">1</Option>
-          <Option name="linux24_path_ip"></Option>
-          <Option name="linux24_path_iptables"></Option>
-          <Option name="linux24_path_logger"></Option>
-          <Option name="linux24_path_lsmod"></Option>
-          <Option name="linux24_path_modprobe"></Option>
+          <Option name="linux24_path_ip"/>
+          <Option name="linux24_path_iptables"/>
+          <Option name="linux24_path_logger"/>
+          <Option name="linux24_path_lsmod"/>
+          <Option name="linux24_path_modprobe"/>
           <Option name="linux24_rp_filter">1</Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">30</Option>
           <Option name="linux24_tcp_keepalive_interval">1800</Option>
-          <Option name="linux24_tcp_sack"></Option>
-          <Option name="linux24_tcp_syncookies"></Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_sack"/>
+          <Option name="linux24_tcp_syncookies"/>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">False</Option>
           <Option name="local_nat">True</Option>
           <Option name="log_all">False</Option>
@@ -40487,21 +41750,21 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="log_tcp_opt">False</Option>
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"></Option>
+          <Option name="mgmt_addr"/>
           <Option name="mgmt_ssh">False</Option>
           <Option name="no_iochains_for_any">False</Option>
           <Option name="no_ipv6_default_policy">False</Option>
           <Option name="no_optimisation">False</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="platform">iptables</Option>
           <Option name="prolog_place">after_flush</Option>
-          <Option name="prolog_script"></Option>
+          <Option name="prolog_script"/>
           <Option name="proxy_arp">True</Option>
-          <Option name="script_env_path"></Option>
-          <Option name="snmp_contact"></Option>
-          <Option name="snmp_description"></Option>
-          <Option name="snmp_location"></Option>
-          <Option name="sshArgs"></Option>
+          <Option name="script_env_path"/>
+          <Option name="snmp_contact"/>
+          <Option name="snmp_description"/>
+          <Option name="snmp_location"/>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -40746,23 +42009,23 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
         <FirewallOptions>
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
-          <Option name="action_on_reject"></Option>
-          <Option name="activationCmd"></Option>
+          <Option name="action_on_reject"/>
+          <Option name="activationCmd"/>
           <Option name="add_check_state_rule">true</Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">False</Option>
           <Option name="clamp_mss_to_mtu">True</Option>
           <Option name="classify_mark_terminating">False</Option>
-          <Option name="cmdline"></Option>
-          <Option name="compiler"></Option>
+          <Option name="cmdline"/>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="drop_invalid">False</Option>
           <Option name="eliminate_duplicates">true</Option>
           <Option name="enable_ipv6">False</Option>
-          <Option name="epilog_script"></Option>
+          <Option name="epilog_script"/>
           <Option name="firewall_dir">/etc</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="freebsd_ip_forward">1</Option>
@@ -40773,7 +42036,7 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="iosacl_include_comments">true</Option>
           <Option name="ipt_mangle_only_rulesets"> fw61-Policy</Option>
           <Option name="ipv4_6_order">ipv4_first</Option>
-          <Option name="limit_suffix"></Option>
+          <Option name="limit_suffix"/>
           <Option name="limit_value">0</Option>
           <Option name="linux24_ip_forward">1</Option>
           <Option name="load_modules">True</Option>
@@ -40788,11 +42051,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="loopback_interface">lo0</Option>
           <Option name="macosx_ip_forward">1</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"></Option>
+          <Option name="mgmt_addr"/>
           <Option name="mgmt_ssh">False</Option>
           <Option name="no_ipv6_default_policy">False</Option>
           <Option name="openbsd_ip_forward">1</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="pass_all_out">false</Option>
           <Option name="pf_limit_frags">5000</Option>
           <Option name="pf_limit_states">10000</Option>
@@ -40812,11 +42075,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="pix_syslog_device_id_supported">false</Option>
           <Option name="pix_use_acl_remarks">true</Option>
           <Option name="prolog_place">top</Option>
-          <Option name="prolog_script"></Option>
+          <Option name="prolog_script"/>
           <Option name="prompt1">$ </Option>
           <Option name="prompt2"> # </Option>
           <Option name="solaris_ip_forward">1</Option>
-          <Option name="sshArgs"></Option>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -40848,29 +42111,29 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="branch_id">id37854X15403</Option>
-              <Option name="classify_str"></Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="classify_str"/>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_branch_in_mangle">False</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -40938,23 +42201,23 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
         <FirewallOptions>
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
-          <Option name="action_on_reject"></Option>
-          <Option name="activationCmd"></Option>
+          <Option name="action_on_reject"/>
+          <Option name="activationCmd"/>
           <Option name="add_check_state_rule">true</Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">False</Option>
           <Option name="clamp_mss_to_mtu">True</Option>
           <Option name="classify_mark_terminating">False</Option>
-          <Option name="cmdline"></Option>
-          <Option name="compiler"></Option>
+          <Option name="cmdline"/>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="drop_invalid">False</Option>
           <Option name="eliminate_duplicates">true</Option>
           <Option name="enable_ipv6">False</Option>
-          <Option name="epilog_script"></Option>
+          <Option name="epilog_script"/>
           <Option name="firewall_dir">/etc</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="freebsd_ip_forward">1</Option>
@@ -40963,9 +42226,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="iosacl_add_clear_statements">true</Option>
           <Option name="iosacl_assume_fw_part_of_any">true</Option>
           <Option name="iosacl_include_comments">true</Option>
-          <Option name="ipt_mangle_only_rulesets"></Option>
+          <Option name="ipt_mangle_only_rulesets"/>
           <Option name="ipv4_6_order">ipv4_first</Option>
-          <Option name="limit_suffix"></Option>
+          <Option name="limit_suffix"/>
           <Option name="limit_value">0</Option>
           <Option name="linux24_ip_forward">1</Option>
           <Option name="load_modules">True</Option>
@@ -40980,11 +42243,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="loopback_interface">lo0</Option>
           <Option name="macosx_ip_forward">1</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"></Option>
+          <Option name="mgmt_addr"/>
           <Option name="mgmt_ssh">False</Option>
           <Option name="no_ipv6_default_policy">False</Option>
           <Option name="openbsd_ip_forward">1</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="pass_all_out">false</Option>
           <Option name="pf_limit_frags">5000</Option>
           <Option name="pf_limit_states">10000</Option>
@@ -41004,11 +42267,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="pix_syslog_device_id_supported">false</Option>
           <Option name="pix_use_acl_remarks">true</Option>
           <Option name="prolog_place">top</Option>
-          <Option name="prolog_script"></Option>
+          <Option name="prolog_script"/>
           <Option name="prompt1">$ </Option>
           <Option name="prompt2"> # </Option>
           <Option name="solaris_ip_forward">1</Option>
-          <Option name="sshArgs"></Option>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -41040,29 +42303,29 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="branch_id">id37854X15403</Option>
-              <Option name="classify_str"></Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="classify_str"/>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_branch_in_mangle">False</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -41110,23 +42373,23 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
         <FirewallOptions>
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
-          <Option name="action_on_reject"></Option>
-          <Option name="activationCmd"></Option>
+          <Option name="action_on_reject"/>
+          <Option name="activationCmd"/>
           <Option name="add_check_state_rule">true</Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">False</Option>
           <Option name="clamp_mss_to_mtu">True</Option>
           <Option name="classify_mark_terminating">False</Option>
-          <Option name="cmdline"></Option>
-          <Option name="compiler"></Option>
+          <Option name="cmdline"/>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="drop_invalid">False</Option>
           <Option name="eliminate_duplicates">true</Option>
           <Option name="enable_ipv6">False</Option>
-          <Option name="epilog_script"></Option>
+          <Option name="epilog_script"/>
           <Option name="firewall_dir">/etc</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="freebsd_ip_forward">1</Option>
@@ -41135,9 +42398,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="iosacl_add_clear_statements">true</Option>
           <Option name="iosacl_assume_fw_part_of_any">true</Option>
           <Option name="iosacl_include_comments">true</Option>
-          <Option name="ipt_mangle_only_rulesets"></Option>
+          <Option name="ipt_mangle_only_rulesets"/>
           <Option name="ipv4_6_order">ipv4_first</Option>
-          <Option name="limit_suffix"></Option>
+          <Option name="limit_suffix"/>
           <Option name="limit_value">0</Option>
           <Option name="linux24_ip_forward">1</Option>
           <Option name="load_modules">True</Option>
@@ -41152,11 +42415,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="loopback_interface">lo0</Option>
           <Option name="macosx_ip_forward">1</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"></Option>
+          <Option name="mgmt_addr"/>
           <Option name="mgmt_ssh">False</Option>
           <Option name="no_ipv6_default_policy">False</Option>
           <Option name="openbsd_ip_forward">1</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="pass_all_out">false</Option>
           <Option name="pf_limit_frags">5000</Option>
           <Option name="pf_limit_states">10000</Option>
@@ -41176,11 +42439,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="pix_syslog_device_id_supported">false</Option>
           <Option name="pix_use_acl_remarks">true</Option>
           <Option name="prolog_place">top</Option>
-          <Option name="prolog_script"></Option>
+          <Option name="prolog_script"/>
           <Option name="prompt1">$ </Option>
           <Option name="prompt2"> # </Option>
           <Option name="solaris_ip_forward">1</Option>
-          <Option name="sshArgs"></Option>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -41914,20 +43177,20 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
         <FirewallOptions>
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
-          <Option name="action_on_reject"></Option>
-          <Option name="activationCmd"></Option>
+          <Option name="action_on_reject"/>
+          <Option name="activationCmd"/>
           <Option name="add_check_state_rule">true</Option>
           <Option name="add_mgmt_ssh_rule_when_stoped">True</Option>
           <Option name="add_rules_for_ipv6_neighbor_discovery">False</Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">True</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
           <Option name="classify_mark_terminating">False</Option>
           <Option name="clear_unknown_interfaces">False</Option>
           <Option name="cmdline">-xt</Option>
-          <Option name="compiler"></Option>
+          <Option name="compiler"/>
           <Option name="configure_bonding_interfaces">False</Option>
           <Option name="configure_bridge_interfaces">False</Option>
           <Option name="configure_interfaces">True</Option>
@@ -41936,7 +43199,7 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="drop_invalid">True</Option>
           <Option name="eliminate_duplicates">true</Option>
           <Option name="enable_ipv6">True</Option>
-          <Option name="epilog_script"></Option>
+          <Option name="epilog_script"/>
           <Option name="firewall_dir">/etc</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="freebsd_ip_forward">1</Option>
@@ -41945,36 +43208,36 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="iosacl_add_clear_statements">true</Option>
           <Option name="iosacl_assume_fw_part_of_any">true</Option>
           <Option name="iosacl_include_comments">true</Option>
-          <Option name="ipt_mangle_only_rulesets"></Option>
+          <Option name="ipt_mangle_only_rulesets"/>
           <Option name="ipv4_6_order">ipv4_first</Option>
-          <Option name="limit_suffix"></Option>
+          <Option name="limit_suffix"/>
           <Option name="limit_value">0</Option>
-          <Option name="linux24_accept_redirects"></Option>
-          <Option name="linux24_accept_source_route"></Option>
-          <Option name="linux24_icmp_echo_ignore_all"></Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
-          <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
-          <Option name="linux24_ip_dynaddr"></Option>
+          <Option name="linux24_accept_redirects"/>
+          <Option name="linux24_accept_source_route"/>
+          <Option name="linux24_icmp_echo_ignore_all"/>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
+          <Option name="linux24_icmp_ignore_bogus_error_responses"/>
+          <Option name="linux24_ip_dynaddr"/>
           <Option name="linux24_ip_forward">1</Option>
           <Option name="linux24_ipv6_forward">1</Option>
-          <Option name="linux24_log_martians"></Option>
-          <Option name="linux24_path_ip"></Option>
-          <Option name="linux24_path_ip6tables"></Option>
-          <Option name="linux24_path_ip6tables_restore"></Option>
-          <Option name="linux24_path_iptables"></Option>
-          <Option name="linux24_path_iptables_restore"></Option>
-          <Option name="linux24_path_logger"></Option>
-          <Option name="linux24_path_lsmod"></Option>
-          <Option name="linux24_path_modprobe"></Option>
-          <Option name="linux24_rp_filter"></Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_log_martians"/>
+          <Option name="linux24_path_ip"/>
+          <Option name="linux24_path_ip6tables"/>
+          <Option name="linux24_path_ip6tables_restore"/>
+          <Option name="linux24_path_iptables"/>
+          <Option name="linux24_path_iptables_restore"/>
+          <Option name="linux24_path_logger"/>
+          <Option name="linux24_path_lsmod"/>
+          <Option name="linux24_path_modprobe"/>
+          <Option name="linux24_rp_filter"/>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">0</Option>
           <Option name="linux24_tcp_keepalive_interval">0</Option>
-          <Option name="linux24_tcp_sack"></Option>
-          <Option name="linux24_tcp_syncookies"></Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_sack"/>
+          <Option name="linux24_tcp_syncookies"/>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">True</Option>
           <Option name="local_nat">False</Option>
           <Option name="log_all">False</Option>
@@ -41991,7 +43254,7 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="mgmt_ssh">True</Option>
           <Option name="no_ipv6_default_policy">False</Option>
           <Option name="openbsd_ip_forward">1</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="pass_all_out">false</Option>
           <Option name="pf_limit_frags">5000</Option>
           <Option name="pf_limit_states">10000</Option>
@@ -42011,13 +43274,13 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="pix_syslog_device_id_supported">false</Option>
           <Option name="pix_use_acl_remarks">true</Option>
           <Option name="prolog_place">top</Option>
-          <Option name="prolog_script"></Option>
+          <Option name="prolog_script"/>
           <Option name="prompt1">$ </Option>
           <Option name="prompt2"> # </Option>
-          <Option name="scpArgs"></Option>
-          <Option name="script_name_on_firewall"></Option>
+          <Option name="scpArgs"/>
+          <Option name="script_name_on_firewall"/>
           <Option name="solaris_ip_forward">1</Option>
-          <Option name="sshArgs"></Option>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -42050,6 +43313,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <RuleSetOptions/>
@@ -42317,23 +43583,23 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
         <FirewallOptions>
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
-          <Option name="action_on_reject"></Option>
-          <Option name="activationCmd"></Option>
+          <Option name="action_on_reject"/>
+          <Option name="activationCmd"/>
           <Option name="add_check_state_rule">true</Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">True</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
           <Option name="classify_mark_terminating">False</Option>
           <Option name="cmdline">-xt</Option>
-          <Option name="compiler"></Option>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="drop_invalid">True</Option>
           <Option name="eliminate_duplicates">true</Option>
           <Option name="enable_ipv6">True</Option>
-          <Option name="epilog_script"></Option>
+          <Option name="epilog_script"/>
           <Option name="firewall_dir">/etc</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="freebsd_ip_forward">1</Option>
@@ -42342,36 +43608,36 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="iosacl_add_clear_statements">true</Option>
           <Option name="iosacl_assume_fw_part_of_any">true</Option>
           <Option name="iosacl_include_comments">true</Option>
-          <Option name="ipt_mangle_only_rulesets"></Option>
+          <Option name="ipt_mangle_only_rulesets"/>
           <Option name="ipv4_6_order">ipv4_first</Option>
-          <Option name="limit_suffix"></Option>
+          <Option name="limit_suffix"/>
           <Option name="limit_value">0</Option>
-          <Option name="linux24_accept_redirects"></Option>
-          <Option name="linux24_accept_source_route"></Option>
-          <Option name="linux24_icmp_echo_ignore_all"></Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
-          <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
-          <Option name="linux24_ip_dynaddr"></Option>
+          <Option name="linux24_accept_redirects"/>
+          <Option name="linux24_accept_source_route"/>
+          <Option name="linux24_icmp_echo_ignore_all"/>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
+          <Option name="linux24_icmp_ignore_bogus_error_responses"/>
+          <Option name="linux24_ip_dynaddr"/>
           <Option name="linux24_ip_forward">1</Option>
           <Option name="linux24_ipv6_forward">1</Option>
-          <Option name="linux24_log_martians"></Option>
-          <Option name="linux24_path_ip"></Option>
-          <Option name="linux24_path_ip6tables"></Option>
-          <Option name="linux24_path_ip6tables_restore"></Option>
-          <Option name="linux24_path_iptables"></Option>
-          <Option name="linux24_path_iptables_restore"></Option>
-          <Option name="linux24_path_logger"></Option>
-          <Option name="linux24_path_lsmod"></Option>
-          <Option name="linux24_path_modprobe"></Option>
-          <Option name="linux24_rp_filter"></Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_log_martians"/>
+          <Option name="linux24_path_ip"/>
+          <Option name="linux24_path_ip6tables"/>
+          <Option name="linux24_path_ip6tables_restore"/>
+          <Option name="linux24_path_iptables"/>
+          <Option name="linux24_path_iptables_restore"/>
+          <Option name="linux24_path_logger"/>
+          <Option name="linux24_path_lsmod"/>
+          <Option name="linux24_path_modprobe"/>
+          <Option name="linux24_rp_filter"/>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">0</Option>
           <Option name="linux24_tcp_keepalive_interval">0</Option>
-          <Option name="linux24_tcp_sack"></Option>
-          <Option name="linux24_tcp_syncookies"></Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_sack"/>
+          <Option name="linux24_tcp_syncookies"/>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">True</Option>
           <Option name="local_nat">False</Option>
           <Option name="log_all">False</Option>
@@ -42384,11 +43650,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="loopback_interface">lo0</Option>
           <Option name="macosx_ip_forward">1</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"></Option>
+          <Option name="mgmt_addr"/>
           <Option name="mgmt_ssh">False</Option>
           <Option name="no_ipv6_default_policy">False</Option>
           <Option name="openbsd_ip_forward">1</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="pass_all_out">false</Option>
           <Option name="pf_limit_frags">5000</Option>
           <Option name="pf_limit_states">10000</Option>
@@ -42408,11 +43674,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="pix_syslog_device_id_supported">false</Option>
           <Option name="pix_use_acl_remarks">true</Option>
           <Option name="prolog_place">top</Option>
-          <Option name="prolog_script"></Option>
+          <Option name="prolog_script"/>
           <Option name="prompt1">$ </Option>
           <Option name="prompt2"> # </Option>
           <Option name="solaris_ip_forward">1</Option>
-          <Option name="sshArgs"></Option>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -42500,54 +43766,54 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
           <Option name="action_on_reject">ICMP host prohibited</Option>
-          <Option name="activationCmd"></Option>
+          <Option name="activationCmd"/>
           <Option name="add_mgmt_ssh_rule_when_stoped">False</Option>
           <Option name="add_rules_for_ipv6_neighbor_discovery">False</Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">True</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
           <Option name="classify_mark_terminating">False</Option>
           <Option name="clear_unknown_interfaces">False</Option>
           <Option name="cmdline">-xt</Option>
-          <Option name="compiler"></Option>
+          <Option name="compiler"/>
           <Option name="configure_bonding_interfaces">False</Option>
           <Option name="configure_bridge_interfaces">False</Option>
           <Option name="configure_interfaces">True</Option>
           <Option name="configure_vlan_interfaces">False</Option>
           <Option name="debug">False</Option>
           <Option name="drop_invalid">False</Option>
-          <Option name="epilog_script"></Option>
-          <Option name="firewall_dir"></Option>
+          <Option name="epilog_script"/>
+          <Option name="firewall_dir"/>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="ignore_empty_groups">False</Option>
-          <Option name="ipt_mangle_only_rulesets"></Option>
+          <Option name="ipt_mangle_only_rulesets"/>
           <Option name="ipv4_6_order">ipv4_first</Option>
-          <Option name="limit_suffix"></Option>
+          <Option name="limit_suffix"/>
           <Option name="limit_value">0</Option>
-          <Option name="linux24_accept_redirects"></Option>
-          <Option name="linux24_accept_source_route"></Option>
-          <Option name="linux24_icmp_echo_ignore_all"></Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
-          <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
-          <Option name="linux24_ip_dynaddr"></Option>
+          <Option name="linux24_accept_redirects"/>
+          <Option name="linux24_accept_source_route"/>
+          <Option name="linux24_icmp_echo_ignore_all"/>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
+          <Option name="linux24_icmp_ignore_bogus_error_responses"/>
+          <Option name="linux24_ip_dynaddr"/>
           <Option name="linux24_ip_forward">1</Option>
-          <Option name="linux24_log_martians"></Option>
-          <Option name="linux24_path_ip"></Option>
-          <Option name="linux24_path_iptables"></Option>
-          <Option name="linux24_path_logger"></Option>
-          <Option name="linux24_path_lsmod"></Option>
-          <Option name="linux24_path_modprobe"></Option>
-          <Option name="linux24_rp_filter"></Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_log_martians"/>
+          <Option name="linux24_path_ip"/>
+          <Option name="linux24_path_iptables"/>
+          <Option name="linux24_path_logger"/>
+          <Option name="linux24_path_lsmod"/>
+          <Option name="linux24_path_modprobe"/>
+          <Option name="linux24_rp_filter"/>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">30</Option>
           <Option name="linux24_tcp_keepalive_interval">1800</Option>
-          <Option name="linux24_tcp_sack"></Option>
-          <Option name="linux24_tcp_syncookies"></Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_sack"/>
+          <Option name="linux24_tcp_syncookies"/>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">True</Option>
           <Option name="local_nat">False</Option>
           <Option name="log_all">False</Option>
@@ -42560,17 +43826,17 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="log_tcp_seq">False</Option>
           <Option name="loopback_interface">lo</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"></Option>
+          <Option name="mgmt_addr"/>
           <Option name="mgmt_ssh">False</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="prolog_place">top</Option>
-          <Option name="prolog_script"></Option>
-          <Option name="scpArgs"></Option>
+          <Option name="prolog_script"/>
+          <Option name="scpArgs"/>
           <Option name="script_name_on_firewall">iptables.sh</Option>
-          <Option name="snmp_contact"></Option>
-          <Option name="snmp_description"></Option>
-          <Option name="snmp_location"></Option>
-          <Option name="sshArgs"></Option>
+          <Option name="snmp_contact"/>
+          <Option name="snmp_description"/>
+          <Option name="snmp_location"/>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -42602,6 +43868,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <RuleSetOptions/>
@@ -42868,23 +44137,23 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
         <FirewallOptions>
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
-          <Option name="action_on_reject"></Option>
-          <Option name="activationCmd"></Option>
+          <Option name="action_on_reject"/>
+          <Option name="activationCmd"/>
           <Option name="add_check_state_rule">true</Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">True</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
           <Option name="classify_mark_terminating">False</Option>
           <Option name="cmdline">-xt</Option>
-          <Option name="compiler"></Option>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="drop_invalid">True</Option>
           <Option name="eliminate_duplicates">true</Option>
           <Option name="enable_ipv6">True</Option>
-          <Option name="epilog_script"></Option>
+          <Option name="epilog_script"/>
           <Option name="firewall_dir">/etc</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="freebsd_ip_forward">1</Option>
@@ -42893,36 +44162,36 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="iosacl_add_clear_statements">true</Option>
           <Option name="iosacl_assume_fw_part_of_any">true</Option>
           <Option name="iosacl_include_comments">true</Option>
-          <Option name="ipt_mangle_only_rulesets"></Option>
+          <Option name="ipt_mangle_only_rulesets"/>
           <Option name="ipv4_6_order">ipv4_first</Option>
-          <Option name="limit_suffix"></Option>
+          <Option name="limit_suffix"/>
           <Option name="limit_value">0</Option>
-          <Option name="linux24_accept_redirects"></Option>
-          <Option name="linux24_accept_source_route"></Option>
-          <Option name="linux24_icmp_echo_ignore_all"></Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
-          <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
-          <Option name="linux24_ip_dynaddr"></Option>
+          <Option name="linux24_accept_redirects"/>
+          <Option name="linux24_accept_source_route"/>
+          <Option name="linux24_icmp_echo_ignore_all"/>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
+          <Option name="linux24_icmp_ignore_bogus_error_responses"/>
+          <Option name="linux24_ip_dynaddr"/>
           <Option name="linux24_ip_forward">1</Option>
           <Option name="linux24_ipv6_forward">1</Option>
-          <Option name="linux24_log_martians"></Option>
-          <Option name="linux24_path_ip"></Option>
-          <Option name="linux24_path_ip6tables"></Option>
-          <Option name="linux24_path_ip6tables_restore"></Option>
-          <Option name="linux24_path_iptables"></Option>
-          <Option name="linux24_path_iptables_restore"></Option>
-          <Option name="linux24_path_logger"></Option>
-          <Option name="linux24_path_lsmod"></Option>
-          <Option name="linux24_path_modprobe"></Option>
-          <Option name="linux24_rp_filter"></Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_log_martians"/>
+          <Option name="linux24_path_ip"/>
+          <Option name="linux24_path_ip6tables"/>
+          <Option name="linux24_path_ip6tables_restore"/>
+          <Option name="linux24_path_iptables"/>
+          <Option name="linux24_path_iptables_restore"/>
+          <Option name="linux24_path_logger"/>
+          <Option name="linux24_path_lsmod"/>
+          <Option name="linux24_path_modprobe"/>
+          <Option name="linux24_rp_filter"/>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">0</Option>
           <Option name="linux24_tcp_keepalive_interval">0</Option>
-          <Option name="linux24_tcp_sack"></Option>
-          <Option name="linux24_tcp_syncookies"></Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_sack"/>
+          <Option name="linux24_tcp_syncookies"/>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">True</Option>
           <Option name="local_nat">False</Option>
           <Option name="log_all">False</Option>
@@ -42935,11 +44204,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="loopback_interface">lo0</Option>
           <Option name="macosx_ip_forward">1</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"></Option>
+          <Option name="mgmt_addr"/>
           <Option name="mgmt_ssh">False</Option>
           <Option name="no_ipv6_default_policy">False</Option>
           <Option name="openbsd_ip_forward">1</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="pass_all_out">false</Option>
           <Option name="pf_limit_frags">5000</Option>
           <Option name="pf_limit_states">10000</Option>
@@ -42959,12 +44228,12 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="pix_syslog_device_id_supported">false</Option>
           <Option name="pix_use_acl_remarks">true</Option>
           <Option name="prolog_place">top</Option>
-          <Option name="prolog_script"></Option>
+          <Option name="prolog_script"/>
           <Option name="prompt1">$ </Option>
           <Option name="prompt2"> # </Option>
-          <Option name="scpArgs"></Option>
+          <Option name="scpArgs"/>
           <Option name="solaris_ip_forward">1</Option>
-          <Option name="sshArgs"></Option>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -42996,6 +44265,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <RuleSetOptions/>
@@ -43018,29 +44290,29 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="branch_id">id39582X8300</Option>
-              <Option name="classify_str"></Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="classify_str"/>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_branch_in_mangle">False</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -43066,23 +44338,23 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
         <FirewallOptions>
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
-          <Option name="action_on_reject"></Option>
-          <Option name="activationCmd"></Option>
+          <Option name="action_on_reject"/>
+          <Option name="activationCmd"/>
           <Option name="add_check_state_rule">true</Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">True</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
           <Option name="classify_mark_terminating">False</Option>
           <Option name="cmdline">-xt</Option>
-          <Option name="compiler"></Option>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="drop_invalid">True</Option>
           <Option name="eliminate_duplicates">true</Option>
           <Option name="enable_ipv6">True</Option>
-          <Option name="epilog_script"></Option>
+          <Option name="epilog_script"/>
           <Option name="firewall_dir">/etc</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="freebsd_ip_forward">1</Option>
@@ -43091,36 +44363,36 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="iosacl_add_clear_statements">true</Option>
           <Option name="iosacl_assume_fw_part_of_any">true</Option>
           <Option name="iosacl_include_comments">true</Option>
-          <Option name="ipt_mangle_only_rulesets"></Option>
+          <Option name="ipt_mangle_only_rulesets"/>
           <Option name="ipv4_6_order">ipv4_first</Option>
-          <Option name="limit_suffix"></Option>
+          <Option name="limit_suffix"/>
           <Option name="limit_value">0</Option>
-          <Option name="linux24_accept_redirects"></Option>
-          <Option name="linux24_accept_source_route"></Option>
-          <Option name="linux24_icmp_echo_ignore_all"></Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
-          <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
-          <Option name="linux24_ip_dynaddr"></Option>
+          <Option name="linux24_accept_redirects"/>
+          <Option name="linux24_accept_source_route"/>
+          <Option name="linux24_icmp_echo_ignore_all"/>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
+          <Option name="linux24_icmp_ignore_bogus_error_responses"/>
+          <Option name="linux24_ip_dynaddr"/>
           <Option name="linux24_ip_forward">1</Option>
           <Option name="linux24_ipv6_forward">1</Option>
-          <Option name="linux24_log_martians"></Option>
-          <Option name="linux24_path_ip"></Option>
-          <Option name="linux24_path_ip6tables"></Option>
-          <Option name="linux24_path_ip6tables_restore"></Option>
-          <Option name="linux24_path_iptables"></Option>
-          <Option name="linux24_path_iptables_restore"></Option>
-          <Option name="linux24_path_logger"></Option>
-          <Option name="linux24_path_lsmod"></Option>
-          <Option name="linux24_path_modprobe"></Option>
-          <Option name="linux24_rp_filter"></Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_log_martians"/>
+          <Option name="linux24_path_ip"/>
+          <Option name="linux24_path_ip6tables"/>
+          <Option name="linux24_path_ip6tables_restore"/>
+          <Option name="linux24_path_iptables"/>
+          <Option name="linux24_path_iptables_restore"/>
+          <Option name="linux24_path_logger"/>
+          <Option name="linux24_path_lsmod"/>
+          <Option name="linux24_path_modprobe"/>
+          <Option name="linux24_rp_filter"/>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">0</Option>
           <Option name="linux24_tcp_keepalive_interval">0</Option>
-          <Option name="linux24_tcp_sack"></Option>
-          <Option name="linux24_tcp_syncookies"></Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_sack"/>
+          <Option name="linux24_tcp_syncookies"/>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">True</Option>
           <Option name="local_nat">False</Option>
           <Option name="log_all">False</Option>
@@ -43133,11 +44405,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="loopback_interface">lo0</Option>
           <Option name="macosx_ip_forward">1</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"></Option>
+          <Option name="mgmt_addr"/>
           <Option name="mgmt_ssh">False</Option>
           <Option name="no_ipv6_default_policy">False</Option>
           <Option name="openbsd_ip_forward">1</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="pass_all_out">false</Option>
           <Option name="pf_limit_frags">5000</Option>
           <Option name="pf_limit_states">10000</Option>
@@ -43161,9 +44433,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
 </Option>
           <Option name="prompt1">$ </Option>
           <Option name="prompt2"> # </Option>
-          <Option name="scpArgs"></Option>
+          <Option name="scpArgs"/>
           <Option name="solaris_ip_forward">1</Option>
-          <Option name="sshArgs"></Option>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -43195,6 +44467,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <RuleSetOptions/>
@@ -43217,29 +44492,29 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="branch_id">id39582X8300</Option>
-              <Option name="classify_str"></Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="classify_str"/>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_branch_in_mangle">False</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -43265,23 +44540,23 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
         <FirewallOptions>
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
-          <Option name="action_on_reject"></Option>
-          <Option name="activationCmd"></Option>
+          <Option name="action_on_reject"/>
+          <Option name="activationCmd"/>
           <Option name="add_check_state_rule">true</Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">True</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
           <Option name="classify_mark_terminating">False</Option>
           <Option name="cmdline">-xt</Option>
-          <Option name="compiler"></Option>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="drop_invalid">True</Option>
           <Option name="eliminate_duplicates">true</Option>
           <Option name="enable_ipv6">True</Option>
-          <Option name="epilog_script"></Option>
+          <Option name="epilog_script"/>
           <Option name="firewall_dir">/etc</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="freebsd_ip_forward">1</Option>
@@ -43290,36 +44565,36 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="iosacl_add_clear_statements">true</Option>
           <Option name="iosacl_assume_fw_part_of_any">true</Option>
           <Option name="iosacl_include_comments">true</Option>
-          <Option name="ipt_mangle_only_rulesets"></Option>
+          <Option name="ipt_mangle_only_rulesets"/>
           <Option name="ipv4_6_order">ipv4_first</Option>
-          <Option name="limit_suffix"></Option>
+          <Option name="limit_suffix"/>
           <Option name="limit_value">0</Option>
-          <Option name="linux24_accept_redirects"></Option>
-          <Option name="linux24_accept_source_route"></Option>
-          <Option name="linux24_icmp_echo_ignore_all"></Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
-          <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
-          <Option name="linux24_ip_dynaddr"></Option>
+          <Option name="linux24_accept_redirects"/>
+          <Option name="linux24_accept_source_route"/>
+          <Option name="linux24_icmp_echo_ignore_all"/>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
+          <Option name="linux24_icmp_ignore_bogus_error_responses"/>
+          <Option name="linux24_ip_dynaddr"/>
           <Option name="linux24_ip_forward">1</Option>
           <Option name="linux24_ipv6_forward">1</Option>
-          <Option name="linux24_log_martians"></Option>
-          <Option name="linux24_path_ip"></Option>
-          <Option name="linux24_path_ip6tables"></Option>
-          <Option name="linux24_path_ip6tables_restore"></Option>
-          <Option name="linux24_path_iptables"></Option>
-          <Option name="linux24_path_iptables_restore"></Option>
-          <Option name="linux24_path_logger"></Option>
-          <Option name="linux24_path_lsmod"></Option>
-          <Option name="linux24_path_modprobe"></Option>
-          <Option name="linux24_rp_filter"></Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_log_martians"/>
+          <Option name="linux24_path_ip"/>
+          <Option name="linux24_path_ip6tables"/>
+          <Option name="linux24_path_ip6tables_restore"/>
+          <Option name="linux24_path_iptables"/>
+          <Option name="linux24_path_iptables_restore"/>
+          <Option name="linux24_path_logger"/>
+          <Option name="linux24_path_lsmod"/>
+          <Option name="linux24_path_modprobe"/>
+          <Option name="linux24_rp_filter"/>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">0</Option>
           <Option name="linux24_tcp_keepalive_interval">0</Option>
-          <Option name="linux24_tcp_sack"></Option>
-          <Option name="linux24_tcp_syncookies"></Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_sack"/>
+          <Option name="linux24_tcp_syncookies"/>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">True</Option>
           <Option name="local_nat">False</Option>
           <Option name="log_all">False</Option>
@@ -43332,11 +44607,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="loopback_interface">lo0</Option>
           <Option name="macosx_ip_forward">1</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"></Option>
+          <Option name="mgmt_addr"/>
           <Option name="mgmt_ssh">False</Option>
           <Option name="no_ipv6_default_policy">False</Option>
           <Option name="openbsd_ip_forward">1</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="pass_all_out">false</Option>
           <Option name="pf_limit_frags">5000</Option>
           <Option name="pf_limit_states">10000</Option>
@@ -43360,9 +44635,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
 </Option>
           <Option name="prompt1">$ </Option>
           <Option name="prompt2"> # </Option>
-          <Option name="scpArgs"></Option>
+          <Option name="scpArgs"/>
           <Option name="solaris_ip_forward">1</Option>
-          <Option name="sshArgs"></Option>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -43394,6 +44669,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <RuleSetOptions/>
@@ -43416,29 +44694,29 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="branch_id">id39582X8300</Option>
-              <Option name="classify_str"></Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="classify_str"/>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_branch_in_mangle">False</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -43464,23 +44742,23 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
         <FirewallOptions>
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
-          <Option name="action_on_reject"></Option>
-          <Option name="activationCmd"></Option>
+          <Option name="action_on_reject"/>
+          <Option name="activationCmd"/>
           <Option name="add_check_state_rule">true</Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">True</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
           <Option name="classify_mark_terminating">False</Option>
           <Option name="cmdline">-xt</Option>
-          <Option name="compiler"></Option>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="drop_invalid">True</Option>
           <Option name="eliminate_duplicates">true</Option>
           <Option name="enable_ipv6">True</Option>
-          <Option name="epilog_script"></Option>
+          <Option name="epilog_script"/>
           <Option name="firewall_dir">/etc</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="freebsd_ip_forward">1</Option>
@@ -43489,36 +44767,36 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="iosacl_add_clear_statements">true</Option>
           <Option name="iosacl_assume_fw_part_of_any">true</Option>
           <Option name="iosacl_include_comments">true</Option>
-          <Option name="ipt_mangle_only_rulesets"></Option>
+          <Option name="ipt_mangle_only_rulesets"/>
           <Option name="ipv4_6_order">ipv4_first</Option>
-          <Option name="limit_suffix"></Option>
+          <Option name="limit_suffix"/>
           <Option name="limit_value">0</Option>
-          <Option name="linux24_accept_redirects"></Option>
-          <Option name="linux24_accept_source_route"></Option>
-          <Option name="linux24_icmp_echo_ignore_all"></Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
-          <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
-          <Option name="linux24_ip_dynaddr"></Option>
+          <Option name="linux24_accept_redirects"/>
+          <Option name="linux24_accept_source_route"/>
+          <Option name="linux24_icmp_echo_ignore_all"/>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
+          <Option name="linux24_icmp_ignore_bogus_error_responses"/>
+          <Option name="linux24_ip_dynaddr"/>
           <Option name="linux24_ip_forward">1</Option>
           <Option name="linux24_ipv6_forward">1</Option>
-          <Option name="linux24_log_martians"></Option>
-          <Option name="linux24_path_ip"></Option>
-          <Option name="linux24_path_ip6tables"></Option>
-          <Option name="linux24_path_ip6tables_restore"></Option>
-          <Option name="linux24_path_iptables"></Option>
-          <Option name="linux24_path_iptables_restore"></Option>
-          <Option name="linux24_path_logger"></Option>
-          <Option name="linux24_path_lsmod"></Option>
-          <Option name="linux24_path_modprobe"></Option>
-          <Option name="linux24_rp_filter"></Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_log_martians"/>
+          <Option name="linux24_path_ip"/>
+          <Option name="linux24_path_ip6tables"/>
+          <Option name="linux24_path_ip6tables_restore"/>
+          <Option name="linux24_path_iptables"/>
+          <Option name="linux24_path_iptables_restore"/>
+          <Option name="linux24_path_logger"/>
+          <Option name="linux24_path_lsmod"/>
+          <Option name="linux24_path_modprobe"/>
+          <Option name="linux24_rp_filter"/>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">0</Option>
           <Option name="linux24_tcp_keepalive_interval">0</Option>
-          <Option name="linux24_tcp_sack"></Option>
-          <Option name="linux24_tcp_syncookies"></Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_sack"/>
+          <Option name="linux24_tcp_syncookies"/>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">True</Option>
           <Option name="local_nat">False</Option>
           <Option name="log_all">False</Option>
@@ -43531,11 +44809,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="loopback_interface">lo0</Option>
           <Option name="macosx_ip_forward">1</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"></Option>
+          <Option name="mgmt_addr"/>
           <Option name="mgmt_ssh">False</Option>
           <Option name="no_ipv6_default_policy">False</Option>
           <Option name="openbsd_ip_forward">1</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="pass_all_out">false</Option>
           <Option name="pf_limit_frags">5000</Option>
           <Option name="pf_limit_states">10000</Option>
@@ -43559,9 +44837,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
 </Option>
           <Option name="prompt1">$ </Option>
           <Option name="prompt2"> # </Option>
-          <Option name="scpArgs"></Option>
+          <Option name="scpArgs"/>
           <Option name="solaris_ip_forward">1</Option>
-          <Option name="sshArgs"></Option>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -43593,6 +44871,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <RuleSetOptions/>
@@ -43615,29 +44896,29 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="branch_id">id39582X8300</Option>
-              <Option name="classify_str"></Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="classify_str"/>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_branch_in_mangle">False</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -43663,23 +44944,23 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
         <FirewallOptions>
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
-          <Option name="action_on_reject"></Option>
-          <Option name="activationCmd"></Option>
+          <Option name="action_on_reject"/>
+          <Option name="activationCmd"/>
           <Option name="add_check_state_rule">true</Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">True</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
           <Option name="classify_mark_terminating">False</Option>
           <Option name="cmdline">-xt</Option>
-          <Option name="compiler"></Option>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="drop_invalid">True</Option>
           <Option name="eliminate_duplicates">true</Option>
           <Option name="enable_ipv6">True</Option>
-          <Option name="epilog_script"></Option>
+          <Option name="epilog_script"/>
           <Option name="firewall_dir">/etc</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="freebsd_ip_forward">1</Option>
@@ -43688,36 +44969,36 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="iosacl_add_clear_statements">true</Option>
           <Option name="iosacl_assume_fw_part_of_any">true</Option>
           <Option name="iosacl_include_comments">true</Option>
-          <Option name="ipt_mangle_only_rulesets"></Option>
+          <Option name="ipt_mangle_only_rulesets"/>
           <Option name="ipv4_6_order">ipv4_first</Option>
-          <Option name="limit_suffix"></Option>
+          <Option name="limit_suffix"/>
           <Option name="limit_value">0</Option>
-          <Option name="linux24_accept_redirects"></Option>
-          <Option name="linux24_accept_source_route"></Option>
-          <Option name="linux24_icmp_echo_ignore_all"></Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
-          <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
-          <Option name="linux24_ip_dynaddr"></Option>
+          <Option name="linux24_accept_redirects"/>
+          <Option name="linux24_accept_source_route"/>
+          <Option name="linux24_icmp_echo_ignore_all"/>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
+          <Option name="linux24_icmp_ignore_bogus_error_responses"/>
+          <Option name="linux24_ip_dynaddr"/>
           <Option name="linux24_ip_forward">1</Option>
           <Option name="linux24_ipv6_forward">1</Option>
-          <Option name="linux24_log_martians"></Option>
-          <Option name="linux24_path_ip"></Option>
-          <Option name="linux24_path_ip6tables"></Option>
-          <Option name="linux24_path_ip6tables_restore"></Option>
-          <Option name="linux24_path_iptables"></Option>
-          <Option name="linux24_path_iptables_restore"></Option>
-          <Option name="linux24_path_logger"></Option>
-          <Option name="linux24_path_lsmod"></Option>
-          <Option name="linux24_path_modprobe"></Option>
-          <Option name="linux24_rp_filter"></Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_log_martians"/>
+          <Option name="linux24_path_ip"/>
+          <Option name="linux24_path_ip6tables"/>
+          <Option name="linux24_path_ip6tables_restore"/>
+          <Option name="linux24_path_iptables"/>
+          <Option name="linux24_path_iptables_restore"/>
+          <Option name="linux24_path_logger"/>
+          <Option name="linux24_path_lsmod"/>
+          <Option name="linux24_path_modprobe"/>
+          <Option name="linux24_rp_filter"/>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">0</Option>
           <Option name="linux24_tcp_keepalive_interval">0</Option>
-          <Option name="linux24_tcp_sack"></Option>
-          <Option name="linux24_tcp_syncookies"></Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_sack"/>
+          <Option name="linux24_tcp_syncookies"/>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">True</Option>
           <Option name="local_nat">False</Option>
           <Option name="log_all">False</Option>
@@ -43730,11 +45011,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="loopback_interface">lo0</Option>
           <Option name="macosx_ip_forward">1</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"></Option>
+          <Option name="mgmt_addr"/>
           <Option name="mgmt_ssh">False</Option>
           <Option name="no_ipv6_default_policy">False</Option>
           <Option name="openbsd_ip_forward">1</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="pass_all_out">false</Option>
           <Option name="pf_limit_frags">5000</Option>
           <Option name="pf_limit_states">10000</Option>
@@ -43758,9 +45039,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
 </Option>
           <Option name="prompt1">$ </Option>
           <Option name="prompt2"> # </Option>
-          <Option name="scpArgs"></Option>
+          <Option name="scpArgs"/>
           <Option name="solaris_ip_forward">1</Option>
-          <Option name="sshArgs"></Option>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -43792,6 +45073,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <RuleSetOptions/>
@@ -43814,29 +45098,29 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="branch_id">id39582X8300</Option>
-              <Option name="classify_str"></Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="classify_str"/>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_branch_in_mangle">False</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -43862,23 +45146,23 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
         <FirewallOptions>
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
-          <Option name="action_on_reject"></Option>
-          <Option name="activationCmd"></Option>
+          <Option name="action_on_reject"/>
+          <Option name="activationCmd"/>
           <Option name="add_check_state_rule">true</Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">True</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
           <Option name="classify_mark_terminating">False</Option>
           <Option name="cmdline">-xt</Option>
-          <Option name="compiler"></Option>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="drop_invalid">True</Option>
           <Option name="eliminate_duplicates">true</Option>
           <Option name="enable_ipv6">True</Option>
-          <Option name="epilog_script"></Option>
+          <Option name="epilog_script"/>
           <Option name="firewall_dir">/etc</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="freebsd_ip_forward">1</Option>
@@ -43887,36 +45171,36 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="iosacl_add_clear_statements">true</Option>
           <Option name="iosacl_assume_fw_part_of_any">true</Option>
           <Option name="iosacl_include_comments">true</Option>
-          <Option name="ipt_mangle_only_rulesets"></Option>
+          <Option name="ipt_mangle_only_rulesets"/>
           <Option name="ipv4_6_order">ipv4_first</Option>
-          <Option name="limit_suffix"></Option>
+          <Option name="limit_suffix"/>
           <Option name="limit_value">0</Option>
-          <Option name="linux24_accept_redirects"></Option>
-          <Option name="linux24_accept_source_route"></Option>
-          <Option name="linux24_icmp_echo_ignore_all"></Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
-          <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
-          <Option name="linux24_ip_dynaddr"></Option>
+          <Option name="linux24_accept_redirects"/>
+          <Option name="linux24_accept_source_route"/>
+          <Option name="linux24_icmp_echo_ignore_all"/>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
+          <Option name="linux24_icmp_ignore_bogus_error_responses"/>
+          <Option name="linux24_ip_dynaddr"/>
           <Option name="linux24_ip_forward">1</Option>
           <Option name="linux24_ipv6_forward">1</Option>
-          <Option name="linux24_log_martians"></Option>
-          <Option name="linux24_path_ip"></Option>
-          <Option name="linux24_path_ip6tables"></Option>
-          <Option name="linux24_path_ip6tables_restore"></Option>
-          <Option name="linux24_path_iptables"></Option>
-          <Option name="linux24_path_iptables_restore"></Option>
-          <Option name="linux24_path_logger"></Option>
-          <Option name="linux24_path_lsmod"></Option>
-          <Option name="linux24_path_modprobe"></Option>
-          <Option name="linux24_rp_filter"></Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_log_martians"/>
+          <Option name="linux24_path_ip"/>
+          <Option name="linux24_path_ip6tables"/>
+          <Option name="linux24_path_ip6tables_restore"/>
+          <Option name="linux24_path_iptables"/>
+          <Option name="linux24_path_iptables_restore"/>
+          <Option name="linux24_path_logger"/>
+          <Option name="linux24_path_lsmod"/>
+          <Option name="linux24_path_modprobe"/>
+          <Option name="linux24_rp_filter"/>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">0</Option>
           <Option name="linux24_tcp_keepalive_interval">0</Option>
-          <Option name="linux24_tcp_sack"></Option>
-          <Option name="linux24_tcp_syncookies"></Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_sack"/>
+          <Option name="linux24_tcp_syncookies"/>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">True</Option>
           <Option name="local_nat">False</Option>
           <Option name="log_all">False</Option>
@@ -43929,11 +45213,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="loopback_interface">lo0</Option>
           <Option name="macosx_ip_forward">1</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"></Option>
+          <Option name="mgmt_addr"/>
           <Option name="mgmt_ssh">False</Option>
           <Option name="no_ipv6_default_policy">False</Option>
           <Option name="openbsd_ip_forward">1</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="pass_all_out">false</Option>
           <Option name="pf_limit_frags">5000</Option>
           <Option name="pf_limit_states">10000</Option>
@@ -43957,9 +45241,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
 </Option>
           <Option name="prompt1">$ </Option>
           <Option name="prompt2"> # </Option>
-          <Option name="scpArgs"></Option>
+          <Option name="scpArgs"/>
           <Option name="solaris_ip_forward">1</Option>
-          <Option name="sshArgs"></Option>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -43991,6 +45275,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <RuleSetOptions/>
@@ -44013,29 +45300,29 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="branch_id">id39582X8300</Option>
-              <Option name="classify_str"></Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="classify_str"/>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_branch_in_mangle">False</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">False</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -44061,23 +45348,23 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
         <FirewallOptions>
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
-          <Option name="action_on_reject"></Option>
-          <Option name="activationCmd"></Option>
+          <Option name="action_on_reject"/>
+          <Option name="activationCmd"/>
           <Option name="add_check_state_rule">true</Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">True</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
           <Option name="classify_mark_terminating">False</Option>
           <Option name="cmdline">-xt</Option>
-          <Option name="compiler"></Option>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="drop_invalid">True</Option>
           <Option name="eliminate_duplicates">true</Option>
           <Option name="enable_ipv6">True</Option>
-          <Option name="epilog_script"></Option>
+          <Option name="epilog_script"/>
           <Option name="firewall_dir">/etc</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="freebsd_ip_forward">1</Option>
@@ -44086,36 +45373,36 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="iosacl_add_clear_statements">true</Option>
           <Option name="iosacl_assume_fw_part_of_any">true</Option>
           <Option name="iosacl_include_comments">true</Option>
-          <Option name="ipt_mangle_only_rulesets"></Option>
+          <Option name="ipt_mangle_only_rulesets"/>
           <Option name="ipv4_6_order">ipv4_first</Option>
-          <Option name="limit_suffix"></Option>
+          <Option name="limit_suffix"/>
           <Option name="limit_value">0</Option>
-          <Option name="linux24_accept_redirects"></Option>
-          <Option name="linux24_accept_source_route"></Option>
-          <Option name="linux24_icmp_echo_ignore_all"></Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
-          <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
-          <Option name="linux24_ip_dynaddr"></Option>
+          <Option name="linux24_accept_redirects"/>
+          <Option name="linux24_accept_source_route"/>
+          <Option name="linux24_icmp_echo_ignore_all"/>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
+          <Option name="linux24_icmp_ignore_bogus_error_responses"/>
+          <Option name="linux24_ip_dynaddr"/>
           <Option name="linux24_ip_forward">1</Option>
           <Option name="linux24_ipv6_forward">1</Option>
-          <Option name="linux24_log_martians"></Option>
-          <Option name="linux24_path_ip"></Option>
-          <Option name="linux24_path_ip6tables"></Option>
-          <Option name="linux24_path_ip6tables_restore"></Option>
-          <Option name="linux24_path_iptables"></Option>
-          <Option name="linux24_path_iptables_restore"></Option>
-          <Option name="linux24_path_logger"></Option>
-          <Option name="linux24_path_lsmod"></Option>
-          <Option name="linux24_path_modprobe"></Option>
-          <Option name="linux24_rp_filter"></Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_log_martians"/>
+          <Option name="linux24_path_ip"/>
+          <Option name="linux24_path_ip6tables"/>
+          <Option name="linux24_path_ip6tables_restore"/>
+          <Option name="linux24_path_iptables"/>
+          <Option name="linux24_path_iptables_restore"/>
+          <Option name="linux24_path_logger"/>
+          <Option name="linux24_path_lsmod"/>
+          <Option name="linux24_path_modprobe"/>
+          <Option name="linux24_rp_filter"/>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">0</Option>
           <Option name="linux24_tcp_keepalive_interval">0</Option>
-          <Option name="linux24_tcp_sack"></Option>
-          <Option name="linux24_tcp_syncookies"></Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_sack"/>
+          <Option name="linux24_tcp_syncookies"/>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">True</Option>
           <Option name="local_nat">False</Option>
           <Option name="log_all">False</Option>
@@ -44128,11 +45415,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="loopback_interface">lo0</Option>
           <Option name="macosx_ip_forward">1</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"></Option>
+          <Option name="mgmt_addr"/>
           <Option name="mgmt_ssh">False</Option>
           <Option name="no_ipv6_default_policy">False</Option>
           <Option name="openbsd_ip_forward">1</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="pass_all_out">false</Option>
           <Option name="pf_limit_frags">5000</Option>
           <Option name="pf_limit_states">10000</Option>
@@ -44156,9 +45443,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
 </Option>
           <Option name="prompt1">$ </Option>
           <Option name="prompt2"> # </Option>
-          <Option name="scpArgs"></Option>
+          <Option name="scpArgs"/>
           <Option name="solaris_ip_forward">1</Option>
-          <Option name="sshArgs"></Option>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -44214,26 +45501,26 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
         <FirewallOptions>
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
-          <Option name="action_on_reject"></Option>
-          <Option name="activationCmd"></Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="action_on_reject"/>
+          <Option name="activationCmd"/>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">True</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
-          <Option name="cmdline"></Option>
-          <Option name="compiler"></Option>
+          <Option name="cmdline"/>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="drop_invalid">False</Option>
           <Option name="eliminate_duplicates">true</Option>
-          <Option name="epilog_script"></Option>
+          <Option name="epilog_script"/>
           <Option name="firewall_dir">/etc</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="freebsd_ip_forward">1</Option>
           <Option name="ignore_empty_groups">False</Option>
           <Option name="in_out_code">true</Option>
-          <Option name="limit_suffix"></Option>
+          <Option name="limit_suffix"/>
           <Option name="limit_value">0</Option>
           <Option name="linux24_ip_forward">1</Option>
           <Option name="load_modules">True</Option>
@@ -44248,10 +45535,10 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="loopback_interface">lo0</Option>
           <Option name="macosx_ip_forward">1</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"></Option>
+          <Option name="mgmt_addr"/>
           <Option name="mgmt_ssh">False</Option>
           <Option name="openbsd_ip_forward">1</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="pass_all_out">false</Option>
           <Option name="pf_limit_frags">5000</Option>
           <Option name="pf_limit_states">10000</Option>
@@ -44271,11 +45558,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="pix_syslog_device_id_supported">false</Option>
           <Option name="pix_use_acl_remarks">true</Option>
           <Option name="prolog_place">top</Option>
-          <Option name="prolog_script"></Option>
+          <Option name="prolog_script"/>
           <Option name="prompt1">$ </Option>
           <Option name="prompt2"> # </Option>
           <Option name="solaris_ip_forward">1</Option>
-          <Option name="sshArgs"></Option>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -44331,26 +45618,26 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
         <FirewallOptions>
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
-          <Option name="action_on_reject"></Option>
-          <Option name="activationCmd"></Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="action_on_reject"/>
+          <Option name="activationCmd"/>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">True</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
-          <Option name="cmdline"></Option>
-          <Option name="compiler"></Option>
+          <Option name="cmdline"/>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="drop_invalid">False</Option>
           <Option name="eliminate_duplicates">true</Option>
-          <Option name="epilog_script"></Option>
+          <Option name="epilog_script"/>
           <Option name="firewall_dir">/etc</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="freebsd_ip_forward">1</Option>
           <Option name="ignore_empty_groups">False</Option>
           <Option name="in_out_code">true</Option>
-          <Option name="limit_suffix"></Option>
+          <Option name="limit_suffix"/>
           <Option name="limit_value">0</Option>
           <Option name="linux24_ip_forward">1</Option>
           <Option name="load_modules">True</Option>
@@ -44365,10 +45652,10 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="loopback_interface">lo0</Option>
           <Option name="macosx_ip_forward">1</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"></Option>
+          <Option name="mgmt_addr"/>
           <Option name="mgmt_ssh">False</Option>
           <Option name="openbsd_ip_forward">1</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="pass_all_out">false</Option>
           <Option name="pf_limit_frags">5000</Option>
           <Option name="pf_limit_states">10000</Option>
@@ -44388,11 +45675,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="pix_syslog_device_id_supported">false</Option>
           <Option name="pix_use_acl_remarks">true</Option>
           <Option name="prolog_place">top</Option>
-          <Option name="prolog_script"></Option>
+          <Option name="prolog_script"/>
           <Option name="prompt1">$ </Option>
           <Option name="prompt2"> # </Option>
           <Option name="solaris_ip_forward">1</Option>
-          <Option name="sshArgs"></Option>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -44423,6 +45710,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <RuleSetOptions/>
@@ -44464,29 +45754,29 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="branch_id">id42400X60089</Option>
-              <Option name="classify_str"></Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
-              <Option name="ipf_route_option"></Option>
+              <Option name="classify_str"/>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
+              <Option name="ipf_route_option"/>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_branch_in_mangle">False</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_reply_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -44507,11 +45797,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
-              <Option name="id"></Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="action_on_reject"/>
+              <Option name="id"/>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -44563,62 +45853,62 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">False</Option>
           <Option name="action_on_reject">ICMP host prohibited</Option>
-          <Option name="activationCmd"></Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="activationCmd"/>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">False</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
           <Option name="classify_mark_terminating">False</Option>
-          <Option name="cmdline"></Option>
-          <Option name="compiler"></Option>
+          <Option name="cmdline"/>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="drop_invalid">True</Option>
           <Option name="dyn_addr">False</Option>
-          <Option name="epilog_script"></Option>
-          <Option name="firewall_dir"></Option>
+          <Option name="epilog_script"/>
+          <Option name="firewall_dir"/>
           <Option name="firewall_is_part_of_any">True</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
-          <Option name="id"></Option>
+          <Option name="id"/>
           <Option name="ignore_empty_groups">False</Option>
-          <Option name="install_script"></Option>
+          <Option name="install_script"/>
           <Option name="ipt_mangle_only_rulesets"> Policy_2 mangle_ruleset</Option>
           <Option name="ipv4_6_order">ipv4_first</Option>
           <Option name="limit_suffix">/day</Option>
           <Option name="limit_value">0</Option>
-          <Option name="linux24_accept_redirects"></Option>
-          <Option name="linux24_accept_source_route"></Option>
-          <Option name="linux24_icmp_echo_ignore_all"></Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
-          <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
-          <Option name="linux24_ip_dynaddr"></Option>
-          <Option name="linux24_ip_forward"></Option>
-          <Option name="linux24_log_martians"></Option>
-          <Option name="linux24_path_ip"></Option>
-          <Option name="linux24_path_iptables"></Option>
-          <Option name="linux24_path_logger"></Option>
-          <Option name="linux24_path_lsmod"></Option>
-          <Option name="linux24_path_modprobe"></Option>
-          <Option name="linux24_rp_filter"></Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_accept_redirects"/>
+          <Option name="linux24_accept_source_route"/>
+          <Option name="linux24_icmp_echo_ignore_all"/>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
+          <Option name="linux24_icmp_ignore_bogus_error_responses"/>
+          <Option name="linux24_ip_dynaddr"/>
+          <Option name="linux24_ip_forward"/>
+          <Option name="linux24_log_martians"/>
+          <Option name="linux24_path_ip"/>
+          <Option name="linux24_path_iptables"/>
+          <Option name="linux24_path_logger"/>
+          <Option name="linux24_path_lsmod"/>
+          <Option name="linux24_path_modprobe"/>
+          <Option name="linux24_rp_filter"/>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">30</Option>
           <Option name="linux24_tcp_keepalive_interval">1800</Option>
-          <Option name="linux24_tcp_sack"></Option>
-          <Option name="linux24_tcp_syncookies"></Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_sack"/>
+          <Option name="linux24_tcp_syncookies"/>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">False</Option>
           <Option name="local_nat">False</Option>
           <Option name="log_all">False</Option>
           <Option name="log_all_dropped">False</Option>
           <Option name="log_invalid">False</Option>
           <Option name="log_ip_opt">False</Option>
-          <Option name="log_level"></Option>
-          <Option name="log_limit_suffix"></Option>
+          <Option name="log_level"/>
+          <Option name="log_limit_suffix"/>
           <Option name="log_limit_value">0</Option>
-          <Option name="log_prefix"></Option>
+          <Option name="log_prefix"/>
           <Option name="log_tcp_opt">False</Option>
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">True</Option>
@@ -44627,16 +45917,16 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="no_iochains_for_any">False</Option>
           <Option name="no_ipv6_default_policy">False</Option>
           <Option name="no_optimisation">False</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="platform">iptables</Option>
           <Option name="prolog_place">top</Option>
-          <Option name="prolog_script"></Option>
-          <Option name="scpArgs"></Option>
-          <Option name="script_env_path"></Option>
-          <Option name="snmp_contact"></Option>
-          <Option name="snmp_description"></Option>
-          <Option name="snmp_location"></Option>
-          <Option name="sshArgs"></Option>
+          <Option name="prolog_script"/>
+          <Option name="scpArgs"/>
+          <Option name="script_env_path"/>
+          <Option name="snmp_contact"/>
+          <Option name="snmp_description"/>
+          <Option name="snmp_location"/>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -44680,15 +45970,15 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -44722,15 +46012,15 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -44765,15 +46055,15 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -44799,23 +46089,23 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
         <FirewallOptions>
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
-          <Option name="action_on_reject"></Option>
-          <Option name="activationCmd"></Option>
+          <Option name="action_on_reject"/>
+          <Option name="activationCmd"/>
           <Option name="add_check_state_rule">true</Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">False</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
           <Option name="classify_mark_terminating">False</Option>
           <Option name="cmdline">-xt</Option>
-          <Option name="compiler"></Option>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="drop_invalid">False</Option>
           <Option name="eliminate_duplicates">true</Option>
           <Option name="enable_ipv6">True</Option>
-          <Option name="epilog_script"></Option>
+          <Option name="epilog_script"/>
           <Option name="firewall_dir">/etc</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="freebsd_ip_forward">1</Option>
@@ -44824,36 +46114,36 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="iosacl_add_clear_statements">true</Option>
           <Option name="iosacl_assume_fw_part_of_any">true</Option>
           <Option name="iosacl_include_comments">true</Option>
-          <Option name="ipt_mangle_only_rulesets"></Option>
+          <Option name="ipt_mangle_only_rulesets"/>
           <Option name="ipv4_6_order">ipv4_first</Option>
-          <Option name="limit_suffix"></Option>
+          <Option name="limit_suffix"/>
           <Option name="limit_value">0</Option>
-          <Option name="linux24_accept_redirects"></Option>
-          <Option name="linux24_accept_source_route"></Option>
-          <Option name="linux24_icmp_echo_ignore_all"></Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
-          <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
-          <Option name="linux24_ip_dynaddr"></Option>
+          <Option name="linux24_accept_redirects"/>
+          <Option name="linux24_accept_source_route"/>
+          <Option name="linux24_icmp_echo_ignore_all"/>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
+          <Option name="linux24_icmp_ignore_bogus_error_responses"/>
+          <Option name="linux24_ip_dynaddr"/>
           <Option name="linux24_ip_forward">1</Option>
           <Option name="linux24_ipv6_forward">1</Option>
-          <Option name="linux24_log_martians"></Option>
-          <Option name="linux24_path_ip"></Option>
-          <Option name="linux24_path_ip6tables"></Option>
-          <Option name="linux24_path_ip6tables_restore"></Option>
-          <Option name="linux24_path_iptables"></Option>
-          <Option name="linux24_path_iptables_restore"></Option>
-          <Option name="linux24_path_logger"></Option>
-          <Option name="linux24_path_lsmod"></Option>
-          <Option name="linux24_path_modprobe"></Option>
-          <Option name="linux24_rp_filter"></Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_log_martians"/>
+          <Option name="linux24_path_ip"/>
+          <Option name="linux24_path_ip6tables"/>
+          <Option name="linux24_path_ip6tables_restore"/>
+          <Option name="linux24_path_iptables"/>
+          <Option name="linux24_path_iptables_restore"/>
+          <Option name="linux24_path_logger"/>
+          <Option name="linux24_path_lsmod"/>
+          <Option name="linux24_path_modprobe"/>
+          <Option name="linux24_rp_filter"/>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">0</Option>
           <Option name="linux24_tcp_keepalive_interval">0</Option>
-          <Option name="linux24_tcp_sack"></Option>
-          <Option name="linux24_tcp_syncookies"></Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_sack"/>
+          <Option name="linux24_tcp_syncookies"/>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">True</Option>
           <Option name="local_nat">False</Option>
           <Option name="log_all">False</Option>
@@ -44866,11 +46156,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="loopback_interface">lo0</Option>
           <Option name="macosx_ip_forward">1</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"></Option>
+          <Option name="mgmt_addr"/>
           <Option name="mgmt_ssh">False</Option>
           <Option name="no_ipv6_default_policy">False</Option>
           <Option name="openbsd_ip_forward">1</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="pass_all_out">false</Option>
           <Option name="pf_limit_frags">5000</Option>
           <Option name="pf_limit_states">10000</Option>
@@ -44890,12 +46180,12 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="pix_syslog_device_id_supported">false</Option>
           <Option name="pix_use_acl_remarks">true</Option>
           <Option name="prolog_place">top</Option>
-          <Option name="prolog_script"></Option>
+          <Option name="prolog_script"/>
           <Option name="prompt1">$ </Option>
           <Option name="prompt2"> # </Option>
-          <Option name="scpArgs"></Option>
+          <Option name="scpArgs"/>
           <Option name="solaris_ip_forward">1</Option>
-          <Option name="sshArgs"></Option>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -44939,15 +46229,15 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -44984,15 +46274,15 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -45018,23 +46308,23 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
         <FirewallOptions>
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
-          <Option name="action_on_reject"></Option>
-          <Option name="activationCmd"></Option>
+          <Option name="action_on_reject"/>
+          <Option name="activationCmd"/>
           <Option name="add_check_state_rule">true</Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">True</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
           <Option name="classify_mark_terminating">False</Option>
           <Option name="cmdline">-xt</Option>
-          <Option name="compiler"></Option>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="drop_invalid">False</Option>
           <Option name="eliminate_duplicates">true</Option>
           <Option name="enable_ipv6">True</Option>
-          <Option name="epilog_script"></Option>
+          <Option name="epilog_script"/>
           <Option name="firewall_dir">/etc</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="freebsd_ip_forward">1</Option>
@@ -45043,36 +46333,36 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="iosacl_add_clear_statements">true</Option>
           <Option name="iosacl_assume_fw_part_of_any">true</Option>
           <Option name="iosacl_include_comments">true</Option>
-          <Option name="ipt_mangle_only_rulesets"></Option>
+          <Option name="ipt_mangle_only_rulesets"/>
           <Option name="ipv4_6_order">ipv4_first</Option>
-          <Option name="limit_suffix"></Option>
+          <Option name="limit_suffix"/>
           <Option name="limit_value">0</Option>
-          <Option name="linux24_accept_redirects"></Option>
-          <Option name="linux24_accept_source_route"></Option>
-          <Option name="linux24_icmp_echo_ignore_all"></Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
-          <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
-          <Option name="linux24_ip_dynaddr"></Option>
+          <Option name="linux24_accept_redirects"/>
+          <Option name="linux24_accept_source_route"/>
+          <Option name="linux24_icmp_echo_ignore_all"/>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
+          <Option name="linux24_icmp_ignore_bogus_error_responses"/>
+          <Option name="linux24_ip_dynaddr"/>
           <Option name="linux24_ip_forward">1</Option>
           <Option name="linux24_ipv6_forward">1</Option>
-          <Option name="linux24_log_martians"></Option>
-          <Option name="linux24_path_ip"></Option>
-          <Option name="linux24_path_ip6tables"></Option>
-          <Option name="linux24_path_ip6tables_restore"></Option>
-          <Option name="linux24_path_iptables"></Option>
-          <Option name="linux24_path_iptables_restore"></Option>
-          <Option name="linux24_path_logger"></Option>
-          <Option name="linux24_path_lsmod"></Option>
-          <Option name="linux24_path_modprobe"></Option>
-          <Option name="linux24_rp_filter"></Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_log_martians"/>
+          <Option name="linux24_path_ip"/>
+          <Option name="linux24_path_ip6tables"/>
+          <Option name="linux24_path_ip6tables_restore"/>
+          <Option name="linux24_path_iptables"/>
+          <Option name="linux24_path_iptables_restore"/>
+          <Option name="linux24_path_logger"/>
+          <Option name="linux24_path_lsmod"/>
+          <Option name="linux24_path_modprobe"/>
+          <Option name="linux24_rp_filter"/>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">0</Option>
           <Option name="linux24_tcp_keepalive_interval">0</Option>
-          <Option name="linux24_tcp_sack"></Option>
-          <Option name="linux24_tcp_syncookies"></Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_sack"/>
+          <Option name="linux24_tcp_syncookies"/>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">True</Option>
           <Option name="local_nat">False</Option>
           <Option name="log_all">False</Option>
@@ -45085,11 +46375,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="loopback_interface">lo0</Option>
           <Option name="macosx_ip_forward">1</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"></Option>
+          <Option name="mgmt_addr"/>
           <Option name="mgmt_ssh">False</Option>
           <Option name="no_ipv6_default_policy">False</Option>
           <Option name="openbsd_ip_forward">1</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="pass_all_out">false</Option>
           <Option name="pf_limit_frags">5000</Option>
           <Option name="pf_limit_states">10000</Option>
@@ -45109,12 +46399,12 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="pix_syslog_device_id_supported">false</Option>
           <Option name="pix_use_acl_remarks">true</Option>
           <Option name="prolog_place">top</Option>
-          <Option name="prolog_script"></Option>
+          <Option name="prolog_script"/>
           <Option name="prompt1">$ </Option>
           <Option name="prompt2"> # </Option>
-          <Option name="scpArgs"></Option>
+          <Option name="scpArgs"/>
           <Option name="solaris_ip_forward">1</Option>
-          <Option name="sshArgs"></Option>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -45145,6 +46435,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id46425X95438" disabled="False" group="" position="1" action="Translate" comment="source port only">
@@ -45166,6 +46459,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="id46457X95438"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id46460X95438" disabled="False" group="" position="2" action="Translate" comment="dest port only">
@@ -45187,6 +46483,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="id46492X95438"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id46495X95438" disabled="False" group="" position="3" action="Translate" comment="SDNAT ">
@@ -45208,6 +46507,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id46529X95438" disabled="False" group="" position="4" action="Translate" comment="SDNAT with source port">
@@ -45229,6 +46531,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="id46457X95438"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id46562X95438" disabled="False" group="" position="5" action="Translate" comment="SDNAT with dest port">
@@ -45250,6 +46555,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="id46492X95438"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id46595X95438" disabled="False" group="" position="6" action="Translate" comment="SDNAT&#10;translate src and dst addresses&#10;and src and dst ports">
@@ -45271,6 +46579,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="id46627X95438"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id46630X95438" disabled="False" group="" position="7" action="Translate" comment="">
@@ -45292,6 +46603,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="id46457X95438"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id46663X95438" disabled="False" group="" position="8" action="Translate" comment="">
@@ -45313,6 +46627,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="id46457X95438"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <RuleSetOptions/>
@@ -45336,7 +46653,7 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="color"></Option>
+              <Option name="color"/>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id46224X95438" disabled="False" group="New Group" log="False" position="1" action="Accept" direction="Both" comment="">
@@ -45356,7 +46673,7 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="color"></Option>
+              <Option name="color"/>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id46251X95438" disabled="False" group="New Group" log="False" position="2" action="Accept" direction="Both" comment="SSH Access to firewall is permitted&#10;only from internal network">
@@ -45376,7 +46693,7 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="color"></Option>
+              <Option name="color"/>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id46279X95438" disabled="False" group="New Group" log="True" position="3" action="Accept" direction="Both" comment="Firewall uses one of the machines&#10;on internal network for DNS">
@@ -45414,7 +46731,7 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="color"></Option>
+              <Option name="color"/>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id46335X95438" disabled="False" group="" log="False" position="5" action="Accept" direction="Both" comment="">
@@ -45434,7 +46751,7 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="color"></Option>
+              <Option name="color"/>
             </PolicyRuleOptions>
           </PolicyRule>
           <PolicyRule id="id46364X95438" disabled="False" group="" log="True" position="6" action="Reject" direction="Both" comment="">
@@ -45673,7 +46990,7 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="color"></Option>
+              <Option name="color"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -45694,7 +47011,7 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="color"></Option>
+              <Option name="color"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -45715,7 +47032,7 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="color"></Option>
+              <Option name="color"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -45736,7 +47053,7 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="color"></Option>
+              <Option name="color"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -45757,7 +47074,7 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="color"></Option>
+              <Option name="color"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -45778,7 +47095,7 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="color"></Option>
+              <Option name="color"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -45799,7 +47116,7 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="color"></Option>
+              <Option name="color"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -45883,8 +47200,8 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="accept_established">true</Option>
           <Option name="accept_new_tcp_with_no_syn">true</Option>
           <Option name="add_check_state_rule">true</Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="check_shading">True</Option>
           <Option name="configure_interfaces">true</Option>
           <Option name="eliminate_duplicates">true</Option>
@@ -45897,10 +47214,10 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="iosacl_acl_basic">True</Option>
           <Option name="iosacl_acl_no_clear">False</Option>
           <Option name="iosacl_acl_substitution">False</Option>
-          <Option name="iosacl_acl_temp_addr"></Option>
+          <Option name="iosacl_acl_temp_addr"/>
           <Option name="iosacl_add_clear_statements">true</Option>
           <Option name="iosacl_assume_fw_part_of_any">true</Option>
-          <Option name="iosacl_epilog_script"></Option>
+          <Option name="iosacl_epilog_script"/>
           <Option name="iosacl_include_comments">True</Option>
           <Option name="iosacl_logging_buffered">False</Option>
           <Option name="iosacl_logging_buffered_level">0</Option>
@@ -45908,11 +47225,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="iosacl_logging_console_level">0</Option>
           <Option name="iosacl_logging_timestamp">False</Option>
           <Option name="iosacl_logging_trap_level">0</Option>
-          <Option name="iosacl_prolog_script"></Option>
+          <Option name="iosacl_prolog_script"/>
           <Option name="iosacl_regroup_commands">False</Option>
-          <Option name="iosacl_syslog_facility"></Option>
-          <Option name="iosacl_syslog_host"></Option>
-          <Option name="ipt_mangle_only_rulesets"></Option>
+          <Option name="iosacl_syslog_facility"/>
+          <Option name="iosacl_syslog_host"/>
+          <Option name="ipt_mangle_only_rulesets"/>
           <Option name="ipv4_6_order">ipv4_first</Option>
           <Option name="limit_value">0</Option>
           <Option name="linux24_ip_forward">1</Option>
@@ -45923,10 +47240,10 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="loopback_interface">lo0</Option>
           <Option name="macosx_ip_forward">1</Option>
           <Option name="manage_virtual_addr">true</Option>
-          <Option name="mgmt_addr"></Option>
+          <Option name="mgmt_addr"/>
           <Option name="mgmt_ssh">False</Option>
           <Option name="openbsd_ip_forward">1</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="pass_all_out">false</Option>
           <Option name="pf_limit_frags">5000</Option>
           <Option name="pf_limit_states">10000</Option>
@@ -45948,7 +47265,7 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="prompt1">$ </Option>
           <Option name="prompt2"> # </Option>
           <Option name="solaris_ip_forward">1</Option>
-          <Option name="sshArgs"></Option>
+          <Option name="sshArgs"/>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="verify_interfaces">true</Option>
         </FirewallOptions>
@@ -45975,6 +47292,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <RuleSetOptions/>
@@ -46241,23 +47561,23 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
         <FirewallOptions>
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
-          <Option name="action_on_reject"></Option>
-          <Option name="activationCmd"></Option>
+          <Option name="action_on_reject"/>
+          <Option name="activationCmd"/>
           <Option name="add_check_state_rule">true</Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">True</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
           <Option name="classify_mark_terminating">False</Option>
           <Option name="cmdline">-xt</Option>
-          <Option name="compiler"></Option>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="drop_invalid">True</Option>
           <Option name="eliminate_duplicates">true</Option>
           <Option name="enable_ipv6">True</Option>
-          <Option name="epilog_script"></Option>
+          <Option name="epilog_script"/>
           <Option name="firewall_dir">/etc</Option>
           <Option name="firewall_is_part_of_any_and_networks">False</Option>
           <Option name="freebsd_ip_forward">1</Option>
@@ -46266,36 +47586,36 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="iosacl_add_clear_statements">true</Option>
           <Option name="iosacl_assume_fw_part_of_any">true</Option>
           <Option name="iosacl_include_comments">true</Option>
-          <Option name="ipt_mangle_only_rulesets"></Option>
+          <Option name="ipt_mangle_only_rulesets"/>
           <Option name="ipv4_6_order">ipv4_first</Option>
-          <Option name="limit_suffix"></Option>
+          <Option name="limit_suffix"/>
           <Option name="limit_value">0</Option>
-          <Option name="linux24_accept_redirects"></Option>
-          <Option name="linux24_accept_source_route"></Option>
-          <Option name="linux24_icmp_echo_ignore_all"></Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
-          <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
-          <Option name="linux24_ip_dynaddr"></Option>
+          <Option name="linux24_accept_redirects"/>
+          <Option name="linux24_accept_source_route"/>
+          <Option name="linux24_icmp_echo_ignore_all"/>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
+          <Option name="linux24_icmp_ignore_bogus_error_responses"/>
+          <Option name="linux24_ip_dynaddr"/>
           <Option name="linux24_ip_forward">1</Option>
           <Option name="linux24_ipv6_forward">1</Option>
-          <Option name="linux24_log_martians"></Option>
-          <Option name="linux24_path_ip"></Option>
-          <Option name="linux24_path_ip6tables"></Option>
-          <Option name="linux24_path_ip6tables_restore"></Option>
-          <Option name="linux24_path_iptables"></Option>
-          <Option name="linux24_path_iptables_restore"></Option>
-          <Option name="linux24_path_logger"></Option>
-          <Option name="linux24_path_lsmod"></Option>
-          <Option name="linux24_path_modprobe"></Option>
-          <Option name="linux24_rp_filter"></Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_log_martians"/>
+          <Option name="linux24_path_ip"/>
+          <Option name="linux24_path_ip6tables"/>
+          <Option name="linux24_path_ip6tables_restore"/>
+          <Option name="linux24_path_iptables"/>
+          <Option name="linux24_path_iptables_restore"/>
+          <Option name="linux24_path_logger"/>
+          <Option name="linux24_path_lsmod"/>
+          <Option name="linux24_path_modprobe"/>
+          <Option name="linux24_rp_filter"/>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">0</Option>
           <Option name="linux24_tcp_keepalive_interval">0</Option>
-          <Option name="linux24_tcp_sack"></Option>
-          <Option name="linux24_tcp_syncookies"></Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_sack"/>
+          <Option name="linux24_tcp_syncookies"/>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">True</Option>
           <Option name="local_nat">False</Option>
           <Option name="log_all">False</Option>
@@ -46308,11 +47628,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="loopback_interface">lo0</Option>
           <Option name="macosx_ip_forward">1</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"></Option>
+          <Option name="mgmt_addr"/>
           <Option name="mgmt_ssh">False</Option>
           <Option name="no_ipv6_default_policy">False</Option>
           <Option name="openbsd_ip_forward">1</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="pass_all_out">false</Option>
           <Option name="pf_limit_frags">5000</Option>
           <Option name="pf_limit_states">10000</Option>
@@ -46332,12 +47652,12 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="pix_syslog_device_id_supported">false</Option>
           <Option name="pix_use_acl_remarks">true</Option>
           <Option name="prolog_place">top</Option>
-          <Option name="prolog_script"></Option>
+          <Option name="prolog_script"/>
           <Option name="prompt1">$ </Option>
           <Option name="prompt2"> # </Option>
-          <Option name="scpArgs"></Option>
+          <Option name="scpArgs"/>
           <Option name="solaris_ip_forward">1</Option>
-          <Option name="sshArgs"></Option>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -46368,6 +47688,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id212971X8629" disabled="False" group="" position="1" action="Translate" comment="">
@@ -46389,6 +47712,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="tcp-HTTP"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id212951X8629" disabled="False" group="" position="2" action="Translate" comment="">
@@ -46410,6 +47736,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id212931X8629" disabled="False" group="" position="3" action="Translate" comment="">
@@ -46431,6 +47760,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="tcp-HTTP"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id212911X8629" disabled="False" group="" position="4" action="Translate" comment="">
@@ -46452,6 +47784,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id212891X8629" disabled="False" group="" position="5" action="Translate" comment="">
@@ -46473,6 +47808,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="id3B5009F7"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <RuleSetOptions/>
@@ -46824,48 +48162,48 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
           <Option name="action_on_reject">ICMP host prohibited</Option>
-          <Option name="activationCmd"></Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="activationCmd"/>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">True</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
           <Option name="classify_mark_terminating">False</Option>
           <Option name="cmdline">-xt</Option>
-          <Option name="compiler"></Option>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="drop_invalid">False</Option>
           <Option name="dyn_addr">False</Option>
-          <Option name="epilog_script"></Option>
-          <Option name="firewall_dir"></Option>
+          <Option name="epilog_script"/>
+          <Option name="firewall_dir"/>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="ignore_empty_groups">False</Option>
           <Option name="ipv4_6_order">ipv4_first</Option>
           <Option name="limit_suffix">/day</Option>
           <Option name="limit_value">0</Option>
-          <Option name="linux24_accept_redirects"></Option>
-          <Option name="linux24_accept_source_route"></Option>
-          <Option name="linux24_icmp_echo_ignore_all"></Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
-          <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
-          <Option name="linux24_ip_dynaddr"></Option>
-          <Option name="linux24_ip_forward"></Option>
-          <Option name="linux24_log_martians"></Option>
-          <Option name="linux24_path_ip"></Option>
-          <Option name="linux24_path_iptables"></Option>
-          <Option name="linux24_path_logger"></Option>
-          <Option name="linux24_path_lsmod"></Option>
-          <Option name="linux24_path_modprobe"></Option>
-          <Option name="linux24_rp_filter"></Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_accept_redirects"/>
+          <Option name="linux24_accept_source_route"/>
+          <Option name="linux24_icmp_echo_ignore_all"/>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
+          <Option name="linux24_icmp_ignore_bogus_error_responses"/>
+          <Option name="linux24_ip_dynaddr"/>
+          <Option name="linux24_ip_forward"/>
+          <Option name="linux24_log_martians"/>
+          <Option name="linux24_path_ip"/>
+          <Option name="linux24_path_iptables"/>
+          <Option name="linux24_path_logger"/>
+          <Option name="linux24_path_lsmod"/>
+          <Option name="linux24_path_modprobe"/>
+          <Option name="linux24_rp_filter"/>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">30</Option>
           <Option name="linux24_tcp_keepalive_interval">1800</Option>
-          <Option name="linux24_tcp_sack"></Option>
-          <Option name="linux24_tcp_syncookies"></Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_sack"/>
+          <Option name="linux24_tcp_syncookies"/>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">True</Option>
           <Option name="local_nat">False</Option>
           <Option name="log_all">False</Option>
@@ -46877,18 +48215,18 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="log_tcp_opt">False</Option>
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"></Option>
+          <Option name="mgmt_addr"/>
           <Option name="mgmt_ssh">False</Option>
           <Option name="no_optimisation">False</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="prolog_place">top</Option>
-          <Option name="prolog_script"></Option>
-          <Option name="scpArgs"></Option>
-          <Option name="script_env_path"></Option>
-          <Option name="snmp_contact"></Option>
-          <Option name="snmp_description"></Option>
-          <Option name="snmp_location"></Option>
-          <Option name="sshArgs"></Option>
+          <Option name="prolog_script"/>
+          <Option name="scpArgs"/>
+          <Option name="script_env_path"/>
+          <Option name="snmp_contact"/>
+          <Option name="snmp_description"/>
+          <Option name="snmp_location"/>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -46919,6 +48257,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id213091X8629" disabled="False" group="" position="1" action="Translate" comment="">
@@ -46940,6 +48281,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="tcp-HTTP"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id213071X8629" disabled="False" group="" position="2" action="Translate" comment="">
@@ -46961,6 +48305,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id213051X8629" disabled="False" group="" position="3" action="Translate" comment="">
@@ -46982,6 +48329,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="tcp-HTTP"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id213031X8629" disabled="False" group="" position="4" action="Translate" comment="">
@@ -47003,6 +48353,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id213011X8629" disabled="False" group="" position="5" action="Translate" comment="">
@@ -47024,6 +48377,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="id3B5009F7"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <RuleSetOptions/>
@@ -47375,48 +48731,48 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
           <Option name="action_on_reject">ICMP host prohibited</Option>
-          <Option name="activationCmd"></Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="activationCmd"/>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">True</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
           <Option name="classify_mark_terminating">False</Option>
           <Option name="cmdline">-xt</Option>
-          <Option name="compiler"></Option>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="drop_invalid">False</Option>
           <Option name="dyn_addr">False</Option>
-          <Option name="epilog_script"></Option>
-          <Option name="firewall_dir"></Option>
+          <Option name="epilog_script"/>
+          <Option name="firewall_dir"/>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="ignore_empty_groups">False</Option>
           <Option name="ipv4_6_order">ipv4_first</Option>
           <Option name="limit_suffix">/day</Option>
           <Option name="limit_value">0</Option>
-          <Option name="linux24_accept_redirects"></Option>
-          <Option name="linux24_accept_source_route"></Option>
-          <Option name="linux24_icmp_echo_ignore_all"></Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
-          <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
-          <Option name="linux24_ip_dynaddr"></Option>
-          <Option name="linux24_ip_forward"></Option>
-          <Option name="linux24_log_martians"></Option>
-          <Option name="linux24_path_ip"></Option>
-          <Option name="linux24_path_iptables"></Option>
-          <Option name="linux24_path_logger"></Option>
-          <Option name="linux24_path_lsmod"></Option>
-          <Option name="linux24_path_modprobe"></Option>
-          <Option name="linux24_rp_filter"></Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_accept_redirects"/>
+          <Option name="linux24_accept_source_route"/>
+          <Option name="linux24_icmp_echo_ignore_all"/>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
+          <Option name="linux24_icmp_ignore_bogus_error_responses"/>
+          <Option name="linux24_ip_dynaddr"/>
+          <Option name="linux24_ip_forward"/>
+          <Option name="linux24_log_martians"/>
+          <Option name="linux24_path_ip"/>
+          <Option name="linux24_path_iptables"/>
+          <Option name="linux24_path_logger"/>
+          <Option name="linux24_path_lsmod"/>
+          <Option name="linux24_path_modprobe"/>
+          <Option name="linux24_rp_filter"/>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">30</Option>
           <Option name="linux24_tcp_keepalive_interval">1800</Option>
-          <Option name="linux24_tcp_sack"></Option>
-          <Option name="linux24_tcp_syncookies"></Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_sack"/>
+          <Option name="linux24_tcp_syncookies"/>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">True</Option>
           <Option name="local_nat">False</Option>
           <Option name="log_all">False</Option>
@@ -47428,18 +48784,18 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="log_tcp_opt">False</Option>
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"></Option>
+          <Option name="mgmt_addr"/>
           <Option name="mgmt_ssh">False</Option>
           <Option name="no_optimisation">False</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="prolog_place">top</Option>
-          <Option name="prolog_script"></Option>
-          <Option name="scpArgs"></Option>
-          <Option name="script_env_path"></Option>
-          <Option name="snmp_contact"></Option>
-          <Option name="snmp_description"></Option>
-          <Option name="snmp_location"></Option>
-          <Option name="sshArgs"></Option>
+          <Option name="prolog_script"/>
+          <Option name="scpArgs"/>
+          <Option name="script_env_path"/>
+          <Option name="snmp_contact"/>
+          <Option name="snmp_description"/>
+          <Option name="snmp_location"/>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -47900,48 +49256,48 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
           <Option name="action_on_reject">ICMP host prohibited</Option>
-          <Option name="activationCmd"></Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="activationCmd"/>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">False</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
           <Option name="classify_mark_terminating">False</Option>
-          <Option name="cmdline"></Option>
-          <Option name="compiler"></Option>
+          <Option name="cmdline"/>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="drop_invalid">False</Option>
           <Option name="dyn_addr">False</Option>
-          <Option name="epilog_script"></Option>
-          <Option name="firewall_dir"></Option>
+          <Option name="epilog_script"/>
+          <Option name="firewall_dir"/>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="ignore_empty_groups">False</Option>
           <Option name="ipv4_6_order">ipv4_first</Option>
           <Option name="limit_suffix">/day</Option>
           <Option name="limit_value">0</Option>
-          <Option name="linux24_accept_redirects"></Option>
-          <Option name="linux24_accept_source_route"></Option>
-          <Option name="linux24_icmp_echo_ignore_all"></Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
-          <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
-          <Option name="linux24_ip_dynaddr"></Option>
-          <Option name="linux24_ip_forward"></Option>
-          <Option name="linux24_log_martians"></Option>
-          <Option name="linux24_path_ip"></Option>
-          <Option name="linux24_path_iptables"></Option>
-          <Option name="linux24_path_logger"></Option>
-          <Option name="linux24_path_lsmod"></Option>
-          <Option name="linux24_path_modprobe"></Option>
-          <Option name="linux24_rp_filter"></Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_accept_redirects"/>
+          <Option name="linux24_accept_source_route"/>
+          <Option name="linux24_icmp_echo_ignore_all"/>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
+          <Option name="linux24_icmp_ignore_bogus_error_responses"/>
+          <Option name="linux24_ip_dynaddr"/>
+          <Option name="linux24_ip_forward"/>
+          <Option name="linux24_log_martians"/>
+          <Option name="linux24_path_ip"/>
+          <Option name="linux24_path_iptables"/>
+          <Option name="linux24_path_logger"/>
+          <Option name="linux24_path_lsmod"/>
+          <Option name="linux24_path_modprobe"/>
+          <Option name="linux24_rp_filter"/>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">30</Option>
           <Option name="linux24_tcp_keepalive_interval">1800</Option>
-          <Option name="linux24_tcp_sack"></Option>
-          <Option name="linux24_tcp_syncookies"></Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_sack"/>
+          <Option name="linux24_tcp_syncookies"/>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">True</Option>
           <Option name="local_nat">False</Option>
           <Option name="log_all">False</Option>
@@ -47953,18 +49309,18 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="log_tcp_opt">False</Option>
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"></Option>
+          <Option name="mgmt_addr"/>
           <Option name="mgmt_ssh">False</Option>
           <Option name="no_optimisation">False</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="prolog_place">top</Option>
-          <Option name="prolog_script"></Option>
-          <Option name="scpArgs"></Option>
-          <Option name="script_env_path"></Option>
-          <Option name="snmp_contact"></Option>
-          <Option name="snmp_description"></Option>
-          <Option name="snmp_location"></Option>
-          <Option name="sshArgs"></Option>
+          <Option name="prolog_script"/>
+          <Option name="scpArgs"/>
+          <Option name="script_env_path"/>
+          <Option name="snmp_contact"/>
+          <Option name="snmp_description"/>
+          <Option name="snmp_location"/>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -48069,32 +49425,32 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="firewall_is_part_of_any_and_networks">true</Option>
           <Option name="flush_and_set_default_policy">False</Option>
           <Option name="limit_value">0</Option>
-          <Option name="linux24_accept_redirects"></Option>
-          <Option name="linux24_accept_source_route"></Option>
-          <Option name="linux24_icmp_echo_ignore_all"></Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
-          <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
-          <Option name="linux24_ip_dynaddr"></Option>
+          <Option name="linux24_accept_redirects"/>
+          <Option name="linux24_accept_source_route"/>
+          <Option name="linux24_icmp_echo_ignore_all"/>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
+          <Option name="linux24_icmp_ignore_bogus_error_responses"/>
+          <Option name="linux24_ip_dynaddr"/>
           <Option name="linux24_ip_forward">1</Option>
-          <Option name="linux24_ipv6_forward"></Option>
-          <Option name="linux24_log_martians"></Option>
-          <Option name="linux24_path_ip"></Option>
-          <Option name="linux24_path_ip6tables"></Option>
-          <Option name="linux24_path_ip6tables_restore"></Option>
-          <Option name="linux24_path_iptables"></Option>
-          <Option name="linux24_path_iptables_restore"></Option>
-          <Option name="linux24_path_logger"></Option>
-          <Option name="linux24_path_lsmod"></Option>
-          <Option name="linux24_path_modprobe"></Option>
-          <Option name="linux24_rp_filter"></Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_ipv6_forward"/>
+          <Option name="linux24_log_martians"/>
+          <Option name="linux24_path_ip"/>
+          <Option name="linux24_path_ip6tables"/>
+          <Option name="linux24_path_ip6tables_restore"/>
+          <Option name="linux24_path_iptables"/>
+          <Option name="linux24_path_iptables_restore"/>
+          <Option name="linux24_path_logger"/>
+          <Option name="linux24_path_lsmod"/>
+          <Option name="linux24_path_modprobe"/>
+          <Option name="linux24_rp_filter"/>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">0</Option>
           <Option name="linux24_tcp_keepalive_interval">0</Option>
-          <Option name="linux24_tcp_sack"></Option>
-          <Option name="linux24_tcp_syncookies"></Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_sack"/>
+          <Option name="linux24_tcp_syncookies"/>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">true</Option>
           <Option name="local_nat">false</Option>
           <Option name="log_level">info</Option>
@@ -48130,29 +49486,32 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="branch_id">id71294X29790</Option>
-              <Option name="classify_str"></Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="classify_str"/>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">none</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id116180X29790" disabled="False" group="" position="1" action="NATBranch" comment="DNAT Rule">
@@ -48174,29 +49533,32 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="branch_id">id71294X29790</Option>
-              <Option name="classify_str"></Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="classify_str"/>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">none</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id57866X1812" disabled="False" group="" position="2" action="NATBranch" comment="for #1686&#10;">
@@ -48218,29 +49580,32 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="branch_id">id71294X29790</Option>
-              <Option name="classify_str"></Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="classify_str"/>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">none</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id916423X1812" disabled="False" group="" position="3" action="NATBranch" comment="for #1686&#10;">
@@ -48262,29 +49627,32 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="branch_id">id71294X29790</Option>
-              <Option name="classify_str"></Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="classify_str"/>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">none</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
             </NATRuleOptions>
           </NATRule>
           <RuleSetOptions/>
@@ -48309,6 +49677,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id93732X29790" disabled="False" group="" position="1" action="Translate" comment="SNAT rule">
@@ -48330,6 +49701,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <RuleSetOptions/>
@@ -48361,18 +49735,18 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
           <Option name="action_on_reject">ICMP net unreachable</Option>
-          <Option name="activationCmd"></Option>
+          <Option name="activationCmd"/>
           <Option name="add_mgmt_ssh_rule_when_stoped">False</Option>
           <Option name="add_rules_for_ipv6_neighbor_discovery">False</Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">False</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
           <Option name="classify_mark_terminating">False</Option>
           <Option name="clear_unknown_interfaces">False</Option>
-          <Option name="cmdline"></Option>
-          <Option name="compiler"></Option>
+          <Option name="cmdline"/>
+          <Option name="compiler"/>
           <Option name="configure_bonding_interfaces">False</Option>
           <Option name="configure_bridge_interfaces">False</Option>
           <Option name="configure_interfaces">True</Option>
@@ -48380,39 +49754,39 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="debug">False</Option>
           <Option name="drop_invalid">False</Option>
           <Option name="dyn_addr">False</Option>
-          <Option name="epilog_script"></Option>
-          <Option name="firewall_dir"></Option>
+          <Option name="epilog_script"/>
+          <Option name="firewall_dir"/>
           <Option name="firewall_is_part_of_any">True</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="ignore_empty_groups">False</Option>
-          <Option name="inst_cmdline"></Option>
-          <Option name="inst_script"></Option>
-          <Option name="install_script"></Option>
+          <Option name="inst_cmdline"/>
+          <Option name="inst_script"/>
+          <Option name="install_script"/>
           <Option name="ipv4_6_order">ipv4_first</Option>
           <Option name="limit_suffix">/day</Option>
           <Option name="limit_value">0</Option>
-          <Option name="linux24_accept_redirects"></Option>
-          <Option name="linux24_accept_source_route"></Option>
-          <Option name="linux24_icmp_echo_ignore_all"></Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
-          <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
-          <Option name="linux24_ip_dynaddr"></Option>
-          <Option name="linux24_ip_forward"></Option>
-          <Option name="linux24_log_martians"></Option>
-          <Option name="linux24_path_ip"></Option>
-          <Option name="linux24_path_iptables"></Option>
-          <Option name="linux24_path_logger"></Option>
-          <Option name="linux24_path_lsmod"></Option>
-          <Option name="linux24_path_modprobe"></Option>
-          <Option name="linux24_rp_filter"></Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_accept_redirects"/>
+          <Option name="linux24_accept_source_route"/>
+          <Option name="linux24_icmp_echo_ignore_all"/>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
+          <Option name="linux24_icmp_ignore_bogus_error_responses"/>
+          <Option name="linux24_ip_dynaddr"/>
+          <Option name="linux24_ip_forward"/>
+          <Option name="linux24_log_martians"/>
+          <Option name="linux24_path_ip"/>
+          <Option name="linux24_path_iptables"/>
+          <Option name="linux24_path_logger"/>
+          <Option name="linux24_path_lsmod"/>
+          <Option name="linux24_path_modprobe"/>
+          <Option name="linux24_rp_filter"/>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">30</Option>
           <Option name="linux24_tcp_keepalive_interval">1800</Option>
-          <Option name="linux24_tcp_sack"></Option>
-          <Option name="linux24_tcp_syncookies"></Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_sack"/>
+          <Option name="linux24_tcp_syncookies"/>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">False</Option>
           <Option name="local_nat">True</Option>
           <Option name="log_all">False</Option>
@@ -48426,22 +49800,22 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="log_tcp_opt">False</Option>
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"></Option>
+          <Option name="mgmt_addr"/>
           <Option name="mgmt_ssh">False</Option>
           <Option name="no_iochains_for_any">False</Option>
           <Option name="no_optimisation">False</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="platform">iptables</Option>
           <Option name="prolog_place">top</Option>
-          <Option name="prolog_script"></Option>
+          <Option name="prolog_script"/>
           <Option name="proxy_arp">False</Option>
-          <Option name="scpArgs"></Option>
-          <Option name="script_env_path"></Option>
-          <Option name="script_name_on_firewall"></Option>
-          <Option name="snmp_contact"></Option>
-          <Option name="snmp_description"></Option>
-          <Option name="snmp_location"></Option>
-          <Option name="sshArgs"></Option>
+          <Option name="scpArgs"/>
+          <Option name="script_env_path"/>
+          <Option name="script_name_on_firewall"/>
+          <Option name="snmp_contact"/>
+          <Option name="snmp_description"/>
+          <Option name="snmp_location"/>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -48479,18 +49853,18 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
         <FirewallOptions>
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
-          <Option name="action_on_reject"></Option>
-          <Option name="activationCmd"></Option>
+          <Option name="action_on_reject"/>
+          <Option name="activationCmd"/>
           <Option name="add_check_state_rule">true</Option>
           <Option name="add_rules_for_ipv6_neighbor_discovery">True</Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">True</Option>
           <Option name="clamp_mss_to_mtu">True</Option>
           <Option name="classify_mark_terminating">False</Option>
           <Option name="cmdline">-xt</Option>
-          <Option name="compiler"></Option>
+          <Option name="compiler"/>
           <Option name="configure_bonding_interfaces">False</Option>
           <Option name="configure_bridge_interfaces">False</Option>
           <Option name="configure_interfaces">True</Option>
@@ -48499,7 +49873,7 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="drop_invalid">True</Option>
           <Option name="eliminate_duplicates">true</Option>
           <Option name="enable_ipv6">True</Option>
-          <Option name="epilog_script"></Option>
+          <Option name="epilog_script"/>
           <Option name="firewall_dir">/etc</Option>
           <Option name="firewall_is_part_of_any_and_networks">False</Option>
           <Option name="freebsd_ip_forward">1</Option>
@@ -48508,36 +49882,36 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="iosacl_add_clear_statements">true</Option>
           <Option name="iosacl_assume_fw_part_of_any">true</Option>
           <Option name="iosacl_include_comments">true</Option>
-          <Option name="ipt_mangle_only_rulesets"></Option>
+          <Option name="ipt_mangle_only_rulesets"/>
           <Option name="ipv4_6_order">ipv4_first</Option>
-          <Option name="limit_suffix"></Option>
+          <Option name="limit_suffix"/>
           <Option name="limit_value">0</Option>
-          <Option name="linux24_accept_redirects"></Option>
-          <Option name="linux24_accept_source_route"></Option>
-          <Option name="linux24_icmp_echo_ignore_all"></Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
-          <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
-          <Option name="linux24_ip_dynaddr"></Option>
+          <Option name="linux24_accept_redirects"/>
+          <Option name="linux24_accept_source_route"/>
+          <Option name="linux24_icmp_echo_ignore_all"/>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
+          <Option name="linux24_icmp_ignore_bogus_error_responses"/>
+          <Option name="linux24_ip_dynaddr"/>
           <Option name="linux24_ip_forward">1</Option>
           <Option name="linux24_ipv6_forward">1</Option>
-          <Option name="linux24_log_martians"></Option>
-          <Option name="linux24_path_ip"></Option>
-          <Option name="linux24_path_ip6tables"></Option>
-          <Option name="linux24_path_ip6tables_restore"></Option>
-          <Option name="linux24_path_iptables"></Option>
-          <Option name="linux24_path_iptables_restore"></Option>
-          <Option name="linux24_path_logger"></Option>
-          <Option name="linux24_path_lsmod"></Option>
-          <Option name="linux24_path_modprobe"></Option>
-          <Option name="linux24_rp_filter"></Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_log_martians"/>
+          <Option name="linux24_path_ip"/>
+          <Option name="linux24_path_ip6tables"/>
+          <Option name="linux24_path_ip6tables_restore"/>
+          <Option name="linux24_path_iptables"/>
+          <Option name="linux24_path_iptables_restore"/>
+          <Option name="linux24_path_logger"/>
+          <Option name="linux24_path_lsmod"/>
+          <Option name="linux24_path_modprobe"/>
+          <Option name="linux24_rp_filter"/>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">0</Option>
           <Option name="linux24_tcp_keepalive_interval">0</Option>
-          <Option name="linux24_tcp_sack"></Option>
-          <Option name="linux24_tcp_syncookies"></Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_sack"/>
+          <Option name="linux24_tcp_syncookies"/>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">True</Option>
           <Option name="local_nat">False</Option>
           <Option name="log_all">False</Option>
@@ -48550,11 +49924,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="loopback_interface">lo0</Option>
           <Option name="macosx_ip_forward">1</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"></Option>
+          <Option name="mgmt_addr"/>
           <Option name="mgmt_ssh">False</Option>
           <Option name="no_ipv6_default_policy">False</Option>
           <Option name="openbsd_ip_forward">1</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="pass_all_out">false</Option>
           <Option name="pf_limit_frags">5000</Option>
           <Option name="pf_limit_states">10000</Option>
@@ -48574,13 +49948,13 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="pix_syslog_device_id_supported">false</Option>
           <Option name="pix_use_acl_remarks">true</Option>
           <Option name="prolog_place">top</Option>
-          <Option name="prolog_script"></Option>
+          <Option name="prolog_script"/>
           <Option name="prompt1">$ </Option>
           <Option name="prompt2"> # </Option>
-          <Option name="scpArgs"></Option>
-          <Option name="script_name_on_firewall"></Option>
+          <Option name="scpArgs"/>
+          <Option name="script_name_on_firewall"/>
           <Option name="solaris_ip_forward">1</Option>
-          <Option name="sshArgs"></Option>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -48611,29 +49985,32 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="branch_id">id71294X29790</Option>
-              <Option name="classify_str"></Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="classify_str"/>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">none</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id49912X46711" disabled="False" group="" position="1" action="NATBranch" comment="DNAT Rule">
@@ -48655,29 +50032,32 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="branch_id">id71294X29790</Option>
-              <Option name="classify_str"></Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="classify_str"/>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">none</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
             </NATRuleOptions>
           </NATRule>
           <RuleSetOptions/>
@@ -48702,6 +50082,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id49942X46711" disabled="False" group="" position="1" action="Translate" comment="SNAT rule">
@@ -48723,6 +50106,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <RuleSetOptions/>
@@ -48784,41 +50170,41 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">False</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
-          <Option name="cmdline"></Option>
-          <Option name="compiler"></Option>
+          <Option name="cmdline"/>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="dyn_addr">False</Option>
           <Option name="firewall_is_part_of_any">True</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="ignore_empty_groups">False</Option>
-          <Option name="inst_cmdline"></Option>
-          <Option name="inst_script"></Option>
-          <Option name="install_script"></Option>
+          <Option name="inst_cmdline"/>
+          <Option name="inst_script"/>
+          <Option name="install_script"/>
           <Option name="limit_suffix">/day</Option>
           <Option name="limit_value">0</Option>
-          <Option name="linux24_accept_redirects"></Option>
-          <Option name="linux24_accept_source_route"></Option>
-          <Option name="linux24_icmp_echo_ignore_all"></Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
-          <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
-          <Option name="linux24_ip_dynaddr"></Option>
-          <Option name="linux24_ip_forward"></Option>
-          <Option name="linux24_log_martians"></Option>
-          <Option name="linux24_path_ip"></Option>
-          <Option name="linux24_path_iptables"></Option>
-          <Option name="linux24_path_logger"></Option>
-          <Option name="linux24_path_lsmod"></Option>
-          <Option name="linux24_path_modprobe"></Option>
-          <Option name="linux24_rp_filter"></Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_accept_redirects"/>
+          <Option name="linux24_accept_source_route"/>
+          <Option name="linux24_icmp_echo_ignore_all"/>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
+          <Option name="linux24_icmp_ignore_bogus_error_responses"/>
+          <Option name="linux24_ip_dynaddr"/>
+          <Option name="linux24_ip_forward"/>
+          <Option name="linux24_log_martians"/>
+          <Option name="linux24_path_ip"/>
+          <Option name="linux24_path_iptables"/>
+          <Option name="linux24_path_logger"/>
+          <Option name="linux24_path_lsmod"/>
+          <Option name="linux24_path_modprobe"/>
+          <Option name="linux24_rp_filter"/>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">30</Option>
           <Option name="linux24_tcp_keepalive_interval">1800</Option>
-          <Option name="linux24_tcp_sack"></Option>
-          <Option name="linux24_tcp_syncookies"></Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_sack"/>
+          <Option name="linux24_tcp_syncookies"/>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">False</Option>
           <Option name="local_nat">False</Option>
           <Option name="log_all">False</Option>
@@ -48835,10 +50221,10 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="no_optimisation">False</Option>
           <Option name="platform">iptables</Option>
           <Option name="proxy_arp">False</Option>
-          <Option name="script_env_path"></Option>
-          <Option name="snmp_contact"></Option>
-          <Option name="snmp_description"></Option>
-          <Option name="snmp_location"></Option>
+          <Option name="script_env_path"/>
+          <Option name="snmp_contact"/>
+          <Option name="snmp_description"/>
+          <Option name="snmp_location"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -48869,8 +50255,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id50590X27203" disabled="False" group="" position="1" action="Translate" comment="">
@@ -48892,8 +50281,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id50605X27203" disabled="False" group="" position="2" action="Translate" comment="">
@@ -48915,8 +50307,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="True">
               <ServiceRef ref="id3B20468D"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id50622X27203" disabled="False" group="" position="3" action="Translate" comment="">
@@ -48939,8 +50334,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <ServiceRef ref="id3B20468D"/>
               <ServiceRef ref="tcp-SMTP"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id847624X27203" disabled="False" group="" position="4" action="Translate" comment="">
@@ -48962,6 +50360,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="id41D0F023"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id1040880X27203" disabled="False" group="" position="5" action="Translate" comment="">
@@ -48984,6 +50385,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id50636X27203" disabled="False" group="" position="6" action="Translate" comment="">
@@ -49006,8 +50410,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id1404055X27203" disabled="False" group="" position="7" action="NATBranch" comment="">
@@ -49029,6 +50436,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id50650X27203" disabled="False" group="" position="8" action="Translate" comment="">
@@ -49050,8 +50460,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id50664X27203" disabled="False" group="" position="9" action="Translate" comment="">
@@ -49073,8 +50486,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id50692X27203" disabled="False" group="" position="10" action="Translate" comment="">
@@ -49096,6 +50512,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id50707X27203" disabled="False" group="" position="11" action="Translate" comment="">
@@ -49117,6 +50536,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id2201304X27203" disabled="False" group="" position="12" action="Translate" comment="">
@@ -49138,6 +50560,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="tcp-HTTP"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id2389233X27203" disabled="False" group="" position="13" action="Translate" comment="">
@@ -49159,6 +50584,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="id3CE719F5"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id2976927X27203" disabled="False" group="" position="14" action="Translate" comment="">
@@ -49180,6 +50608,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="id69386X25753"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <RuleSetOptions/>
@@ -49202,7 +50633,7 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -49240,53 +50671,53 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">False</Option>
           <Option name="action_on_reject">ICMP net unreachable</Option>
-          <Option name="activationCmd"></Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="activationCmd"/>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">True</Option>
           <Option name="clamp_mss_to_mtu">True</Option>
           <Option name="classify_mark_terminating">False</Option>
           <Option name="cmdline">-xt</Option>
-          <Option name="compiler"></Option>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="drop_invalid">True</Option>
           <Option name="dyn_addr">False</Option>
-          <Option name="epilog_script"></Option>
-          <Option name="firewall_dir"></Option>
+          <Option name="epilog_script"/>
+          <Option name="firewall_dir"/>
           <Option name="firewall_is_part_of_any">True</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
-          <Option name="id"></Option>
+          <Option name="id"/>
           <Option name="ignore_empty_groups">False</Option>
-          <Option name="inst_cmdline"></Option>
-          <Option name="inst_script"></Option>
-          <Option name="install_script"></Option>
+          <Option name="inst_cmdline"/>
+          <Option name="inst_script"/>
+          <Option name="install_script"/>
           <Option name="ipv4_6_order">ipv4_first</Option>
           <Option name="limit_suffix">/second</Option>
           <Option name="limit_value">5</Option>
           <Option name="linux24_accept_redirects">0</Option>
           <Option name="linux24_accept_source_route">0</Option>
           <Option name="linux24_icmp_echo_ignore_all">1</Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
           <Option name="linux24_icmp_ignore_bogus_error_responses">1</Option>
-          <Option name="linux24_ip_dynaddr"></Option>
+          <Option name="linux24_ip_dynaddr"/>
           <Option name="linux24_ip_forward">1</Option>
           <Option name="linux24_log_martians">1</Option>
-          <Option name="linux24_path_ip"></Option>
-          <Option name="linux24_path_iptables"></Option>
-          <Option name="linux24_path_logger"></Option>
-          <Option name="linux24_path_lsmod"></Option>
-          <Option name="linux24_path_modprobe"></Option>
+          <Option name="linux24_path_ip"/>
+          <Option name="linux24_path_iptables"/>
+          <Option name="linux24_path_logger"/>
+          <Option name="linux24_path_lsmod"/>
+          <Option name="linux24_path_modprobe"/>
           <Option name="linux24_rp_filter">1</Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">30</Option>
           <Option name="linux24_tcp_keepalive_interval">1800</Option>
-          <Option name="linux24_tcp_sack"></Option>
-          <Option name="linux24_tcp_syncookies"></Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_sack"/>
+          <Option name="linux24_tcp_syncookies"/>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">False</Option>
           <Option name="local_nat">True</Option>
           <Option name="log_all">False</Option>
@@ -49300,22 +50731,22 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="log_tcp_opt">False</Option>
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"></Option>
+          <Option name="mgmt_addr"/>
           <Option name="mgmt_ssh">False</Option>
           <Option name="no_iochains_for_any">False</Option>
           <Option name="no_ipv6_default_policy">False</Option>
           <Option name="no_optimisation">False</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="platform">iptables</Option>
           <Option name="prolog_place">after_flush</Option>
-          <Option name="prolog_script"></Option>
+          <Option name="prolog_script"/>
           <Option name="proxy_arp">True</Option>
-          <Option name="scpArgs"></Option>
-          <Option name="script_env_path"></Option>
-          <Option name="snmp_contact"></Option>
-          <Option name="snmp_description"></Option>
-          <Option name="snmp_location"></Option>
-          <Option name="sshArgs"></Option>
+          <Option name="scpArgs"/>
+          <Option name="script_env_path"/>
+          <Option name="snmp_contact"/>
+          <Option name="snmp_description"/>
+          <Option name="snmp_location"/>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -49348,8 +50779,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id1072290X83572" disabled="False" group="" position="1" action="Translate" comment="">
@@ -49371,8 +50805,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id1971843X83572" disabled="False" group="" position="2" action="Translate" comment="&#9;">
@@ -49394,8 +50831,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id2327300X83572" disabled="False" group="" position="3" action="Translate" comment="&#9;">
@@ -49417,8 +50857,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id481529X83572" disabled="False" group="" position="4" action="Translate" comment="should be -o eth1">
@@ -49440,8 +50883,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id433966X83572" disabled="False" group="" position="5" action="Translate" comment="should be -o eth2">
@@ -49463,8 +50909,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id1380877X2261" disabled="False" group="" position="6" action="Translate" comment="">
@@ -49486,6 +50935,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id528405X83572" disabled="False" group="" position="7" action="Translate" comment="partially matches eth3">
@@ -49507,8 +50959,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id528530X83572" disabled="False" group="" position="8" action="Translate" comment="should be two rules: -o eth2 and -o eth3">
@@ -49530,8 +50985,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
             </NATRuleOptions>
           </NATRule>
           <NATRule id="id51150X85535" disabled="False" group="" position="9" action="Translate" comment="should be -o eth2">
@@ -49553,8 +51011,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
             </NATRuleOptions>
           </NATRule>
           <RuleSetOptions/>
@@ -49577,7 +51038,7 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="id"></Option>
+              <Option name="id"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -49616,53 +51077,53 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">False</Option>
           <Option name="action_on_reject">ICMP net unreachable</Option>
-          <Option name="activationCmd"></Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="activationCmd"/>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">True</Option>
           <Option name="clamp_mss_to_mtu">True</Option>
           <Option name="classify_mark_terminating">False</Option>
           <Option name="cmdline">-xt</Option>
-          <Option name="compiler"></Option>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="drop_invalid">True</Option>
           <Option name="dyn_addr">False</Option>
-          <Option name="epilog_script"></Option>
-          <Option name="firewall_dir"></Option>
+          <Option name="epilog_script"/>
+          <Option name="firewall_dir"/>
           <Option name="firewall_is_part_of_any">True</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
-          <Option name="id"></Option>
+          <Option name="id"/>
           <Option name="ignore_empty_groups">False</Option>
-          <Option name="inst_cmdline"></Option>
-          <Option name="inst_script"></Option>
-          <Option name="install_script"></Option>
+          <Option name="inst_cmdline"/>
+          <Option name="inst_script"/>
+          <Option name="install_script"/>
           <Option name="ipv4_6_order">ipv4_first</Option>
           <Option name="limit_suffix">/second</Option>
           <Option name="limit_value">5</Option>
           <Option name="linux24_accept_redirects">0</Option>
           <Option name="linux24_accept_source_route">0</Option>
           <Option name="linux24_icmp_echo_ignore_all">1</Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
           <Option name="linux24_icmp_ignore_bogus_error_responses">1</Option>
-          <Option name="linux24_ip_dynaddr"></Option>
+          <Option name="linux24_ip_dynaddr"/>
           <Option name="linux24_ip_forward">1</Option>
           <Option name="linux24_log_martians">1</Option>
-          <Option name="linux24_path_ip"></Option>
-          <Option name="linux24_path_iptables"></Option>
-          <Option name="linux24_path_logger"></Option>
-          <Option name="linux24_path_lsmod"></Option>
-          <Option name="linux24_path_modprobe"></Option>
+          <Option name="linux24_path_ip"/>
+          <Option name="linux24_path_iptables"/>
+          <Option name="linux24_path_logger"/>
+          <Option name="linux24_path_lsmod"/>
+          <Option name="linux24_path_modprobe"/>
           <Option name="linux24_rp_filter">1</Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">30</Option>
           <Option name="linux24_tcp_keepalive_interval">1800</Option>
-          <Option name="linux24_tcp_sack"></Option>
-          <Option name="linux24_tcp_syncookies"></Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_sack"/>
+          <Option name="linux24_tcp_syncookies"/>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">False</Option>
           <Option name="local_nat">True</Option>
           <Option name="log_all">False</Option>
@@ -49676,22 +51137,22 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="log_tcp_opt">False</Option>
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"></Option>
+          <Option name="mgmt_addr"/>
           <Option name="mgmt_ssh">False</Option>
           <Option name="no_iochains_for_any">False</Option>
           <Option name="no_ipv6_default_policy">False</Option>
           <Option name="no_optimisation">False</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="platform">iptables</Option>
           <Option name="prolog_place">after_flush</Option>
-          <Option name="prolog_script"></Option>
+          <Option name="prolog_script"/>
           <Option name="proxy_arp">True</Option>
-          <Option name="scpArgs"></Option>
-          <Option name="script_env_path"></Option>
-          <Option name="snmp_contact"></Option>
-          <Option name="snmp_description"></Option>
-          <Option name="snmp_location"></Option>
-          <Option name="sshArgs"></Option>
+          <Option name="scpArgs"/>
+          <Option name="script_env_path"/>
+          <Option name="snmp_contact"/>
+          <Option name="snmp_description"/>
+          <Option name="snmp_location"/>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -49725,6 +51186,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id219008X73327" disabled="False" group="" position="1" action="Translate" comment="">
@@ -49747,6 +51211,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
               <Option name="ipt_nat_persistent">True</Option>
               <Option name="ipt_nat_random">True</Option>
@@ -49772,6 +51239,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
               <Option name="ipt_nat_persistent">True</Option>
               <Option name="ipt_nat_random">False</Option>
@@ -49797,6 +51267,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
               <Option name="ipt_nat_persistent">True</Option>
               <Option name="ipt_nat_random">True</Option>
@@ -49823,6 +51296,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
               <Option name="ipt_nat_persistent">True</Option>
               <Option name="ipt_nat_random">False</Option>
@@ -49848,6 +51324,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions>
               <Option name="ipt_nat_persistent">True</Option>
               <Option name="ipt_nat_random">True</Option>
@@ -49966,41 +51445,41 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">False</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
-          <Option name="cmdline"></Option>
-          <Option name="compiler"></Option>
+          <Option name="cmdline"/>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="dyn_addr">False</Option>
           <Option name="firewall_is_part_of_any">True</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="ignore_empty_groups">False</Option>
-          <Option name="inst_cmdline"></Option>
-          <Option name="inst_script"></Option>
-          <Option name="install_script"></Option>
+          <Option name="inst_cmdline"/>
+          <Option name="inst_script"/>
+          <Option name="install_script"/>
           <Option name="limit_suffix">/day</Option>
           <Option name="limit_value">0</Option>
-          <Option name="linux24_accept_redirects"></Option>
-          <Option name="linux24_accept_source_route"></Option>
-          <Option name="linux24_icmp_echo_ignore_all"></Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
-          <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
-          <Option name="linux24_ip_dynaddr"></Option>
-          <Option name="linux24_ip_forward"></Option>
-          <Option name="linux24_log_martians"></Option>
-          <Option name="linux24_path_ip"></Option>
-          <Option name="linux24_path_iptables"></Option>
-          <Option name="linux24_path_logger"></Option>
-          <Option name="linux24_path_lsmod"></Option>
-          <Option name="linux24_path_modprobe"></Option>
-          <Option name="linux24_rp_filter"></Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_accept_redirects"/>
+          <Option name="linux24_accept_source_route"/>
+          <Option name="linux24_icmp_echo_ignore_all"/>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
+          <Option name="linux24_icmp_ignore_bogus_error_responses"/>
+          <Option name="linux24_ip_dynaddr"/>
+          <Option name="linux24_ip_forward"/>
+          <Option name="linux24_log_martians"/>
+          <Option name="linux24_path_ip"/>
+          <Option name="linux24_path_iptables"/>
+          <Option name="linux24_path_logger"/>
+          <Option name="linux24_path_lsmod"/>
+          <Option name="linux24_path_modprobe"/>
+          <Option name="linux24_rp_filter"/>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">30</Option>
           <Option name="linux24_tcp_keepalive_interval">1800</Option>
-          <Option name="linux24_tcp_sack"></Option>
-          <Option name="linux24_tcp_syncookies"></Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_sack"/>
+          <Option name="linux24_tcp_syncookies"/>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">False</Option>
           <Option name="local_nat">False</Option>
           <Option name="log_all">False</Option>
@@ -50017,10 +51496,10 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="no_optimisation">False</Option>
           <Option name="platform">iptables</Option>
           <Option name="proxy_arp">False</Option>
-          <Option name="script_env_path"></Option>
-          <Option name="snmp_contact"></Option>
-          <Option name="snmp_description"></Option>
-          <Option name="snmp_location"></Option>
+          <Option name="script_env_path"/>
+          <Option name="snmp_contact"/>
+          <Option name="snmp_description"/>
+          <Option name="snmp_location"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -50055,7 +51534,7 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="connlimit_above_not">False</Option>
               <Option name="connlimit_masklen">0</Option>
               <Option name="connlimit_value">0</Option>
-              <Option name="firewall_is_part_of_any_and_networks"></Option>
+              <Option name="firewall_is_part_of_any_and_networks"/>
               <Option name="hashlimit_burst">0</Option>
               <Option name="hashlimit_dstlimit">False</Option>
               <Option name="hashlimit_expire">0</Option>
@@ -50065,16 +51544,16 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="limit_value_not">False</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -50109,16 +51588,16 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="limit_value_not">False</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -50143,7 +51622,7 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="connlimit_above_not">False</Option>
               <Option name="connlimit_masklen">0</Option>
               <Option name="connlimit_value">0</Option>
-              <Option name="firewall_is_part_of_any_and_networks"></Option>
+              <Option name="firewall_is_part_of_any_and_networks"/>
               <Option name="hashlimit_burst">0</Option>
               <Option name="hashlimit_dstlimit">False</Option>
               <Option name="hashlimit_expire">0</Option>
@@ -50153,16 +51632,16 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="limit_value_not">False</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -50187,7 +51666,7 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="connlimit_above_not">False</Option>
               <Option name="connlimit_masklen">0</Option>
               <Option name="connlimit_value">0</Option>
-              <Option name="firewall_is_part_of_any_and_networks"></Option>
+              <Option name="firewall_is_part_of_any_and_networks"/>
               <Option name="hashlimit_burst">0</Option>
               <Option name="hashlimit_dstlimit">False</Option>
               <Option name="hashlimit_expire">0</Option>
@@ -50197,16 +51676,16 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="limit_value_not">False</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -50232,65 +51711,65 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
         <FirewallOptions>
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
-          <Option name="action_on_reject"></Option>
-          <Option name="activationCmd"></Option>
+          <Option name="action_on_reject"/>
+          <Option name="activationCmd"/>
           <Option name="add_mgmt_ssh_rule_when_stoped">False</Option>
           <Option name="add_rules_for_ipv6_neighbor_discovery">False</Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">True</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
           <Option name="classify_mark_terminating">False</Option>
           <Option name="clear_unknown_interfaces">False</Option>
-          <Option name="cmdline"></Option>
-          <Option name="compiler"></Option>
+          <Option name="cmdline"/>
+          <Option name="compiler"/>
           <Option name="configure_bonding_interfaces">False</Option>
           <Option name="configure_bridge_interfaces">False</Option>
           <Option name="configure_interfaces">True</Option>
           <Option name="configure_vlan_interfaces">False</Option>
           <Option name="debug">False</Option>
           <Option name="drop_invalid">False</Option>
-          <Option name="epilog_script"></Option>
-          <Option name="firewall_dir"></Option>
+          <Option name="epilog_script"/>
+          <Option name="firewall_dir"/>
           <Option name="firewall_is_part_of_any_and_networks">False</Option>
           <Option name="flush_and_set_default_policy">True</Option>
           <Option name="ignore_empty_groups">False</Option>
           <Option name="ipv4_6_order">ipv4_first</Option>
-          <Option name="limit_suffix"></Option>
+          <Option name="limit_suffix"/>
           <Option name="limit_value">0</Option>
-          <Option name="linux24_accept_redirects"></Option>
-          <Option name="linux24_accept_source_route"></Option>
+          <Option name="linux24_accept_redirects"/>
+          <Option name="linux24_accept_source_route"/>
           <Option name="linux24_conntrack_hashsize">0</Option>
           <Option name="linux24_conntrack_max">0</Option>
-          <Option name="linux24_conntrack_tcp_be_liberal"></Option>
-          <Option name="linux24_icmp_echo_ignore_all"></Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
-          <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
-          <Option name="linux24_ip_dynaddr"></Option>
+          <Option name="linux24_conntrack_tcp_be_liberal"/>
+          <Option name="linux24_icmp_echo_ignore_all"/>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
+          <Option name="linux24_icmp_ignore_bogus_error_responses"/>
+          <Option name="linux24_ip_dynaddr"/>
           <Option name="linux24_ip_forward">0</Option>
-          <Option name="linux24_ipv6_forward"></Option>
-          <Option name="linux24_log_martians"></Option>
-          <Option name="linux24_path_brctl"></Option>
-          <Option name="linux24_path_ifenslave"></Option>
-          <Option name="linux24_path_ip"></Option>
-          <Option name="linux24_path_ip6tables"></Option>
-          <Option name="linux24_path_ip6tables_restore"></Option>
-          <Option name="linux24_path_iptables"></Option>
-          <Option name="linux24_path_iptables_restore"></Option>
-          <Option name="linux24_path_logger"></Option>
-          <Option name="linux24_path_lsmod"></Option>
-          <Option name="linux24_path_modprobe"></Option>
-          <Option name="linux24_path_vconfig"></Option>
-          <Option name="linux24_rp_filter"></Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_ipv6_forward"/>
+          <Option name="linux24_log_martians"/>
+          <Option name="linux24_path_brctl"/>
+          <Option name="linux24_path_ifenslave"/>
+          <Option name="linux24_path_ip"/>
+          <Option name="linux24_path_ip6tables"/>
+          <Option name="linux24_path_ip6tables_restore"/>
+          <Option name="linux24_path_iptables"/>
+          <Option name="linux24_path_iptables_restore"/>
+          <Option name="linux24_path_logger"/>
+          <Option name="linux24_path_lsmod"/>
+          <Option name="linux24_path_modprobe"/>
+          <Option name="linux24_path_vconfig"/>
+          <Option name="linux24_rp_filter"/>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">0</Option>
           <Option name="linux24_tcp_keepalive_interval">0</Option>
-          <Option name="linux24_tcp_sack"></Option>
-          <Option name="linux24_tcp_syncookies"></Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_sack"/>
+          <Option name="linux24_tcp_syncookies"/>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">True</Option>
           <Option name="local_nat">False</Option>
           <Option name="log_all">False</Option>
@@ -50302,15 +51781,15 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="log_tcp_seq">False</Option>
           <Option name="loopback_interface">lo</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"></Option>
+          <Option name="mgmt_addr"/>
           <Option name="mgmt_ssh">False</Option>
           <Option name="modules_dir">/lib/modules/`uname -r`/kernel/net/</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="prolog_place">top</Option>
-          <Option name="prolog_script"></Option>
-          <Option name="scpArgs"></Option>
-          <Option name="script_name_on_firewall"></Option>
-          <Option name="sshArgs"></Option>
+          <Option name="prolog_script"/>
+          <Option name="scpArgs"/>
+          <Option name="script_name_on_firewall"/>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -50413,12 +51892,12 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           </InterfaceOptions>
           <Interface id="id55135X40565" dedicated_failover="False" dyn="False" label="eth0" mgmt="False" security_level="0" unnum="True" unprotected="False" name="eth0" comment="" ro="False">
             <InterfaceOptions>
-              <Option name="bonding_policy"></Option>
-              <Option name="bondng_driver_options"></Option>
+              <Option name="bonding_policy"/>
+              <Option name="bondng_driver_options"/>
               <Option name="enable_stp">False</Option>
               <Option name="type">ethernet</Option>
               <Option name="vlan_id">0</Option>
-              <Option name="xmit_hash_policy"></Option>
+              <Option name="xmit_hash_policy"/>
             </InterfaceOptions>
           </Interface>
           <Interface id="id55137X40565" dedicated_failover="False" dyn="False" label="eth1" mgmt="False" security_level="0" unnum="True" unprotected="False" name="eth1" comment="" ro="False">
@@ -50429,23 +51908,23 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Interface id="id55139X40565" dedicated_failover="False" dyn="False" label="bond0.2 - LAN usr" mgmt="False" security_level="0" unnum="False" unprotected="False" name="bond0.2" comment="" ro="False">
             <IPv4 id="id55140X40565" name="fw-A:bond0:bond0.2:ip" comment="" ro="False" address="192.168.2.11" netmask="255.255.255.0"/>
             <InterfaceOptions>
-              <Option name="bonding_policy"></Option>
-              <Option name="bondng_driver_options"></Option>
+              <Option name="bonding_policy"/>
+              <Option name="bondng_driver_options"/>
               <Option name="enable_stp">False</Option>
               <Option name="type">8021q</Option>
               <Option name="vlan_id">2</Option>
-              <Option name="xmit_hash_policy"></Option>
+              <Option name="xmit_hash_policy"/>
             </InterfaceOptions>
           </Interface>
           <Interface id="id55142X40565" dedicated_failover="False" dyn="False" label="bond0.1 - LAN des" mgmt="True" security_level="0" unnum="False" unprotected="False" name="bond0.1" comment="" ro="False">
             <IPv4 id="id55143X40565" name="fw-A:bond0:bond0.1:ip" comment="" ro="False" address="192.168.1.11" netmask="255.255.255.0"/>
             <InterfaceOptions>
-              <Option name="bonding_policy"></Option>
-              <Option name="bondng_driver_options"></Option>
+              <Option name="bonding_policy"/>
+              <Option name="bondng_driver_options"/>
               <Option name="enable_stp">False</Option>
               <Option name="type">8021q</Option>
               <Option name="vlan_id">1</Option>
-              <Option name="xmit_hash_policy"></Option>
+              <Option name="xmit_hash_policy"/>
             </InterfaceOptions>
           </Interface>
         </Interface>
@@ -50515,32 +51994,32 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
         <FirewallOptions>
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
-          <Option name="action_on_reject"></Option>
-          <Option name="activationCmd"></Option>
+          <Option name="action_on_reject"/>
+          <Option name="activationCmd"/>
           <Option name="add_mgmt_ssh_rule_when_stoped">True</Option>
           <Option name="add_rules_for_ipv6_neighbor_discovery">False</Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">True</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
           <Option name="classify_mark_terminating">False</Option>
           <Option name="clear_unknown_interfaces">True</Option>
-          <Option name="cmdline"></Option>
-          <Option name="compiler"></Option>
+          <Option name="cmdline"/>
+          <Option name="compiler"/>
           <Option name="configure_bonding_interfaces">True</Option>
           <Option name="configure_bridge_interfaces">False</Option>
           <Option name="configure_interfaces">True</Option>
           <Option name="configure_vlan_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="drop_invalid">True</Option>
-          <Option name="epilog_script"></Option>
+          <Option name="epilog_script"/>
           <Option name="firewall_dir">/sw/FWbuilder</Option>
           <Option name="firewall_is_part_of_any_and_networks">False</Option>
           <Option name="flush_and_set_default_policy">True</Option>
           <Option name="ignore_empty_groups">False</Option>
           <Option name="ipv4_6_order">ipv4_first</Option>
-          <Option name="limit_suffix"></Option>
+          <Option name="limit_suffix"/>
           <Option name="limit_value">0</Option>
           <Option name="linux24_accept_redirects">0</Option>
           <Option name="linux24_accept_source_route">0</Option>
@@ -50552,28 +52031,28 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="linux24_icmp_ignore_bogus_error_responses">0</Option>
           <Option name="linux24_ip_dynaddr">1</Option>
           <Option name="linux24_ip_forward">1</Option>
-          <Option name="linux24_ipv6_forward"></Option>
+          <Option name="linux24_ipv6_forward"/>
           <Option name="linux24_log_martians">1</Option>
-          <Option name="linux24_path_brctl"></Option>
-          <Option name="linux24_path_ifenslave"></Option>
-          <Option name="linux24_path_ip"></Option>
-          <Option name="linux24_path_ip6tables"></Option>
-          <Option name="linux24_path_ip6tables_restore"></Option>
-          <Option name="linux24_path_iptables"></Option>
-          <Option name="linux24_path_iptables_restore"></Option>
-          <Option name="linux24_path_logger"></Option>
-          <Option name="linux24_path_lsmod"></Option>
-          <Option name="linux24_path_modprobe"></Option>
-          <Option name="linux24_path_vconfig"></Option>
+          <Option name="linux24_path_brctl"/>
+          <Option name="linux24_path_ifenslave"/>
+          <Option name="linux24_path_ip"/>
+          <Option name="linux24_path_ip6tables"/>
+          <Option name="linux24_path_ip6tables_restore"/>
+          <Option name="linux24_path_iptables"/>
+          <Option name="linux24_path_iptables_restore"/>
+          <Option name="linux24_path_logger"/>
+          <Option name="linux24_path_lsmod"/>
+          <Option name="linux24_path_modprobe"/>
+          <Option name="linux24_path_vconfig"/>
           <Option name="linux24_rp_filter">1</Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">0</Option>
           <Option name="linux24_tcp_keepalive_interval">0</Option>
-          <Option name="linux24_tcp_sack"></Option>
+          <Option name="linux24_tcp_sack"/>
           <Option name="linux24_tcp_syncookies">1</Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">True</Option>
           <Option name="local_nat">False</Option>
           <Option name="log_all">False</Option>
@@ -50588,12 +52067,12 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="mgmt_addr">192.168.1.100</Option>
           <Option name="mgmt_ssh">False</Option>
           <Option name="modules_dir">/lib/modules/`uname -r`/kernel/net/</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="prolog_place">top</Option>
-          <Option name="prolog_script"></Option>
-          <Option name="scpArgs"></Option>
-          <Option name="script_name_on_firewall"></Option>
-          <Option name="sshArgs"></Option>
+          <Option name="prolog_script"/>
+          <Option name="scpArgs"/>
+          <Option name="script_name_on_firewall"/>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -50628,7 +52107,7 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="connlimit_above_not">False</Option>
               <Option name="connlimit_masklen">0</Option>
               <Option name="connlimit_value">0</Option>
-              <Option name="firewall_is_part_of_any_and_networks"></Option>
+              <Option name="firewall_is_part_of_any_and_networks"/>
               <Option name="hashlimit_burst">0</Option>
               <Option name="hashlimit_dstlimit">False</Option>
               <Option name="hashlimit_expire">0</Option>
@@ -50638,16 +52117,16 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
               <Option name="limit_suffix">/second</Option>
               <Option name="limit_value">10</Option>
               <Option name="limit_value_not">False</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">False</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -50695,7 +52174,7 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="connlimit_above_not">False</Option>
               <Option name="connlimit_masklen">0</Option>
               <Option name="connlimit_value">10</Option>
-              <Option name="firewall_is_part_of_any_and_networks"></Option>
+              <Option name="firewall_is_part_of_any_and_networks"/>
               <Option name="hashlimit_burst">0</Option>
               <Option name="hashlimit_dstlimit">False</Option>
               <Option name="hashlimit_expire">0</Option>
@@ -50705,16 +52184,16 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="limit_value_not">False</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">False</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -50762,7 +52241,7 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="connlimit_above_not">False</Option>
               <Option name="connlimit_masklen">0</Option>
               <Option name="connlimit_value">0</Option>
-              <Option name="firewall_is_part_of_any_and_networks"></Option>
+              <Option name="firewall_is_part_of_any_and_networks"/>
               <Option name="hashlimit_burst">0</Option>
               <Option name="hashlimit_dstlimit">False</Option>
               <Option name="hashlimit_expire">0</Option>
@@ -50777,11 +52256,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="hashlimit_suffix">/second</Option>
               <Option name="hashlimit_value">10</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="limit_value_not">False</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">False</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -50830,7 +52309,7 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="connlimit_above_not">False</Option>
               <Option name="connlimit_masklen">0</Option>
               <Option name="connlimit_value">0</Option>
-              <Option name="firewall_is_part_of_any_and_networks"></Option>
+              <Option name="firewall_is_part_of_any_and_networks"/>
               <Option name="hashlimit_burst">0</Option>
               <Option name="hashlimit_dstlimit">False</Option>
               <Option name="hashlimit_expire">0</Option>
@@ -50845,11 +52324,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="hashlimit_suffix">/second</Option>
               <Option name="hashlimit_value">50</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="limit_value_not">False</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">False</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -50875,7 +52354,7 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="connlimit_above_not">False</Option>
               <Option name="connlimit_masklen">0</Option>
               <Option name="connlimit_value">0</Option>
-              <Option name="firewall_is_part_of_any_and_networks"></Option>
+              <Option name="firewall_is_part_of_any_and_networks"/>
               <Option name="hashlimit_burst">0</Option>
               <Option name="hashlimit_dstlimit">False</Option>
               <Option name="hashlimit_expire">0</Option>
@@ -50890,11 +52369,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="hashlimit_suffix">/second</Option>
               <Option name="hashlimit_value">50</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="limit_value_not">False</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">False</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -50923,7 +52402,7 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="connlimit_above_not">False</Option>
               <Option name="connlimit_masklen">0</Option>
               <Option name="connlimit_value">0</Option>
-              <Option name="firewall_is_part_of_any_and_networks"></Option>
+              <Option name="firewall_is_part_of_any_and_networks"/>
               <Option name="hashlimit_burst">0</Option>
               <Option name="hashlimit_dstlimit">False</Option>
               <Option name="hashlimit_expire">0</Option>
@@ -50938,11 +52417,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="hashlimit_suffix">/second</Option>
               <Option name="hashlimit_value">30</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="limit_value_not">False</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">False</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -50968,7 +52447,7 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="connlimit_above_not">False</Option>
               <Option name="connlimit_masklen">0</Option>
               <Option name="connlimit_value">0</Option>
-              <Option name="firewall_is_part_of_any_and_networks"></Option>
+              <Option name="firewall_is_part_of_any_and_networks"/>
               <Option name="hashlimit_burst">0</Option>
               <Option name="hashlimit_dstlimit">False</Option>
               <Option name="hashlimit_expire">0</Option>
@@ -50983,11 +52462,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="hashlimit_suffix">/second</Option>
               <Option name="hashlimit_value">50</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="limit_value_not">False</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">False</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -51013,7 +52492,7 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="connlimit_above_not">False</Option>
               <Option name="connlimit_masklen">0</Option>
               <Option name="connlimit_value">0</Option>
-              <Option name="firewall_is_part_of_any_and_networks"></Option>
+              <Option name="firewall_is_part_of_any_and_networks"/>
               <Option name="hashlimit_burst">0</Option>
               <Option name="hashlimit_dstlimit">False</Option>
               <Option name="hashlimit_expire">0</Option>
@@ -51028,11 +52507,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="hashlimit_suffix">/second</Option>
               <Option name="hashlimit_value">10</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="limit_value_not">False</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">False</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -51058,7 +52537,7 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="connlimit_above_not">False</Option>
               <Option name="connlimit_masklen">0</Option>
               <Option name="connlimit_value">0</Option>
-              <Option name="firewall_is_part_of_any_and_networks"></Option>
+              <Option name="firewall_is_part_of_any_and_networks"/>
               <Option name="hashlimit_burst">0</Option>
               <Option name="hashlimit_dstlimit">False</Option>
               <Option name="hashlimit_expire">0</Option>
@@ -51073,11 +52552,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="hashlimit_suffix">/second</Option>
               <Option name="hashlimit_value">10</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="limit_value_not">False</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">False</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -51106,7 +52585,7 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="connlimit_above_not">False</Option>
               <Option name="connlimit_masklen">0</Option>
               <Option name="connlimit_value">0</Option>
-              <Option name="firewall_is_part_of_any_and_networks"></Option>
+              <Option name="firewall_is_part_of_any_and_networks"/>
               <Option name="hashlimit_burst">0</Option>
               <Option name="hashlimit_dstlimit">False</Option>
               <Option name="hashlimit_expire">0</Option>
@@ -51121,11 +52600,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="hashlimit_suffix">/second</Option>
               <Option name="hashlimit_value">50</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="limit_value_not">False</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">False</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -51151,7 +52630,7 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="connlimit_above_not">False</Option>
               <Option name="connlimit_masklen">0</Option>
               <Option name="connlimit_value">0</Option>
-              <Option name="firewall_is_part_of_any_and_networks"></Option>
+              <Option name="firewall_is_part_of_any_and_networks"/>
               <Option name="hashlimit_burst">0</Option>
               <Option name="hashlimit_dstlimit">False</Option>
               <Option name="hashlimit_expire">0</Option>
@@ -51166,11 +52645,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="hashlimit_suffix">/second</Option>
               <Option name="hashlimit_value">30</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="limit_value_not">False</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">False</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -51200,26 +52679,26 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
         <FirewallOptions>
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
-          <Option name="action_on_reject"></Option>
-          <Option name="activationCmd"></Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="action_on_reject"/>
+          <Option name="activationCmd"/>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">True</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
           <Option name="cmdline">-xt</Option>
-          <Option name="compiler"></Option>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="drop_invalid">False</Option>
           <Option name="eliminate_duplicates">true</Option>
-          <Option name="epilog_script"></Option>
+          <Option name="epilog_script"/>
           <Option name="firewall_dir">/etc</Option>
           <Option name="firewall_is_part_of_any_and_networks">False</Option>
           <Option name="freebsd_ip_forward">1</Option>
           <Option name="ignore_empty_groups">False</Option>
           <Option name="in_out_code">true</Option>
-          <Option name="limit_suffix"></Option>
+          <Option name="limit_suffix"/>
           <Option name="limit_value">0</Option>
           <Option name="linux24_ip_forward">1</Option>
           <Option name="load_modules">True</Option>
@@ -51234,10 +52713,10 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="loopback_interface">lo0</Option>
           <Option name="macosx_ip_forward">1</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"></Option>
+          <Option name="mgmt_addr"/>
           <Option name="mgmt_ssh">False</Option>
           <Option name="openbsd_ip_forward">1</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="pass_all_out">false</Option>
           <Option name="pf_limit_frags">5000</Option>
           <Option name="pf_limit_states">10000</Option>
@@ -51257,11 +52736,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="pix_syslog_device_id_supported">false</Option>
           <Option name="pix_use_acl_remarks">true</Option>
           <Option name="prolog_place">top</Option>
-          <Option name="prolog_script"></Option>
+          <Option name="prolog_script"/>
           <Option name="prompt1">$ </Option>
           <Option name="prompt2"> # </Option>
           <Option name="solaris_ip_forward">1</Option>
-          <Option name="sshArgs"></Option>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -51298,62 +52777,62 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">False</Option>
           <Option name="action_on_reject">ICMP host prohibited</Option>
-          <Option name="activationCmd"></Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="activationCmd"/>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">False</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
           <Option name="classify_mark_terminating">False</Option>
-          <Option name="cmdline"></Option>
-          <Option name="compiler"></Option>
+          <Option name="cmdline"/>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="drop_invalid">True</Option>
           <Option name="dyn_addr">False</Option>
-          <Option name="epilog_script"></Option>
-          <Option name="firewall_dir"></Option>
+          <Option name="epilog_script"/>
+          <Option name="firewall_dir"/>
           <Option name="firewall_is_part_of_any">True</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
-          <Option name="id"></Option>
+          <Option name="id"/>
           <Option name="ignore_empty_groups">False</Option>
-          <Option name="install_script"></Option>
+          <Option name="install_script"/>
           <Option name="ipt_mangle_only_rulesets"> Policy_2 mangle_ruleset</Option>
           <Option name="ipv4_6_order">ipv4_first</Option>
           <Option name="limit_suffix">/day</Option>
           <Option name="limit_value">0</Option>
-          <Option name="linux24_accept_redirects"></Option>
-          <Option name="linux24_accept_source_route"></Option>
-          <Option name="linux24_icmp_echo_ignore_all"></Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
-          <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
-          <Option name="linux24_ip_dynaddr"></Option>
-          <Option name="linux24_ip_forward"></Option>
-          <Option name="linux24_log_martians"></Option>
-          <Option name="linux24_path_ip"></Option>
-          <Option name="linux24_path_iptables"></Option>
-          <Option name="linux24_path_logger"></Option>
-          <Option name="linux24_path_lsmod"></Option>
-          <Option name="linux24_path_modprobe"></Option>
-          <Option name="linux24_rp_filter"></Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_accept_redirects"/>
+          <Option name="linux24_accept_source_route"/>
+          <Option name="linux24_icmp_echo_ignore_all"/>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
+          <Option name="linux24_icmp_ignore_bogus_error_responses"/>
+          <Option name="linux24_ip_dynaddr"/>
+          <Option name="linux24_ip_forward"/>
+          <Option name="linux24_log_martians"/>
+          <Option name="linux24_path_ip"/>
+          <Option name="linux24_path_iptables"/>
+          <Option name="linux24_path_logger"/>
+          <Option name="linux24_path_lsmod"/>
+          <Option name="linux24_path_modprobe"/>
+          <Option name="linux24_rp_filter"/>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">30</Option>
           <Option name="linux24_tcp_keepalive_interval">1800</Option>
-          <Option name="linux24_tcp_sack"></Option>
-          <Option name="linux24_tcp_syncookies"></Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_sack"/>
+          <Option name="linux24_tcp_syncookies"/>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">False</Option>
           <Option name="local_nat">False</Option>
           <Option name="log_all">False</Option>
           <Option name="log_all_dropped">False</Option>
           <Option name="log_invalid">False</Option>
           <Option name="log_ip_opt">False</Option>
-          <Option name="log_level"></Option>
-          <Option name="log_limit_suffix"></Option>
+          <Option name="log_level"/>
+          <Option name="log_limit_suffix"/>
           <Option name="log_limit_value">0</Option>
-          <Option name="log_prefix"></Option>
+          <Option name="log_prefix"/>
           <Option name="log_tcp_opt">False</Option>
           <Option name="log_tcp_seq">False</Option>
           <Option name="manage_virtual_addr">True</Option>
@@ -51362,16 +52841,16 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="no_iochains_for_any">False</Option>
           <Option name="no_ipv6_default_policy">False</Option>
           <Option name="no_optimisation">False</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="platform">iptables</Option>
           <Option name="prolog_place">top</Option>
-          <Option name="prolog_script"></Option>
-          <Option name="scpArgs"></Option>
-          <Option name="script_env_path"></Option>
-          <Option name="snmp_contact"></Option>
-          <Option name="snmp_description"></Option>
-          <Option name="snmp_location"></Option>
-          <Option name="sshArgs"></Option>
+          <Option name="prolog_script"/>
+          <Option name="scpArgs"/>
+          <Option name="script_env_path"/>
+          <Option name="snmp_contact"/>
+          <Option name="snmp_description"/>
+          <Option name="snmp_location"/>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -51402,6 +52881,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <RuleSetOptions/>
@@ -51447,28 +52929,28 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
-              <Option name="branch_anchor_name"></Option>
-              <Option name="branch_chain_name"></Option>
-              <Option name="classify_str"></Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="action_on_reject"/>
+              <Option name="branch_anchor_name"/>
+              <Option name="branch_chain_name"/>
+              <Option name="classify_str"/>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">Route through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">True</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">Route through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="tagobject_id">id449328D824380</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -51489,28 +52971,28 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
-              <Option name="branch_anchor_name"></Option>
-              <Option name="branch_chain_name"></Option>
-              <Option name="classify_str"></Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="action_on_reject"/>
+              <Option name="branch_anchor_name"/>
+              <Option name="branch_chain_name"/>
+              <Option name="classify_str"/>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">Route through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">True</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">Route through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="tagobject_id">id449328D924380</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -51549,28 +53031,28 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
-              <Option name="branch_anchor_name"></Option>
-              <Option name="branch_chain_name"></Option>
-              <Option name="classify_str"></Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="action_on_reject"/>
+              <Option name="branch_anchor_name"/>
+              <Option name="branch_chain_name"/>
+              <Option name="classify_str"/>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">Route through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">True</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
               <Option name="ipt_oif">eth0</Option>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">Route through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -51591,28 +53073,28 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
-              <Option name="branch_anchor_name"></Option>
-              <Option name="branch_chain_name"></Option>
-              <Option name="classify_str"></Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="action_on_reject"/>
+              <Option name="branch_anchor_name"/>
+              <Option name="branch_chain_name"/>
+              <Option name="classify_str"/>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">Route through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">True</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
               <Option name="ipt_oif">eth2</Option>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">Route through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -51654,27 +53136,27 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
-              <Option name="classify_str"></Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="action_on_reject"/>
+              <Option name="classify_str"/>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">False</Option>
               <Option name="tagobject_id">id365999</Option>
             </PolicyRuleOptions>
@@ -51708,29 +53190,29 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
         <FirewallOptions>
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
-          <Option name="action_on_reject"></Option>
-          <Option name="activationCmd"></Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="action_on_reject"/>
+          <Option name="activationCmd"/>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">False</Option>
           <Option name="clamp_mss_to_mtu">True</Option>
           <Option name="classify_mark_terminating">False</Option>
-          <Option name="cmdline"></Option>
-          <Option name="compiler"></Option>
+          <Option name="cmdline"/>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="drop_invalid">False</Option>
           <Option name="eliminate_duplicates">true</Option>
           <Option name="enable_ipv6">False</Option>
-          <Option name="epilog_script"></Option>
+          <Option name="epilog_script"/>
           <Option name="firewall_dir">/etc</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="freebsd_ip_forward">1</Option>
           <Option name="ignore_empty_groups">False</Option>
           <Option name="in_out_code">true</Option>
           <Option name="ipv4_6_order">ipv4_first</Option>
-          <Option name="limit_suffix"></Option>
+          <Option name="limit_suffix"/>
           <Option name="limit_value">0</Option>
           <Option name="linux24_ip_forward">1</Option>
           <Option name="load_modules">True</Option>
@@ -51745,11 +53227,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="loopback_interface">lo0</Option>
           <Option name="macosx_ip_forward">1</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"></Option>
+          <Option name="mgmt_addr"/>
           <Option name="mgmt_ssh">False</Option>
           <Option name="no_ipv6_default_policy">False</Option>
           <Option name="openbsd_ip_forward">1</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="pass_all_out">false</Option>
           <Option name="pf_limit_frags">5000</Option>
           <Option name="pf_limit_states">10000</Option>
@@ -51769,11 +53251,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="pix_syslog_device_id_supported">false</Option>
           <Option name="pix_use_acl_remarks">true</Option>
           <Option name="prolog_place">top</Option>
-          <Option name="prolog_script"></Option>
+          <Option name="prolog_script"/>
           <Option name="prompt1">$ </Option>
           <Option name="prompt2"> # </Option>
           <Option name="solaris_ip_forward">1</Option>
-          <Option name="sshArgs"></Option>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -51804,6 +53286,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <RuleSetOptions/>
@@ -51829,28 +53314,28 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
-              <Option name="branch_anchor_name"></Option>
-              <Option name="branch_chain_name"></Option>
-              <Option name="classify_str"></Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="action_on_reject"/>
+              <Option name="branch_anchor_name"/>
+              <Option name="branch_chain_name"/>
+              <Option name="classify_str"/>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">Route through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">True</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">Route through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="tagobject_id">id449328D824380</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -51871,28 +53356,28 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
-              <Option name="branch_anchor_name"></Option>
-              <Option name="branch_chain_name"></Option>
-              <Option name="classify_str"></Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="action_on_reject"/>
+              <Option name="branch_anchor_name"/>
+              <Option name="branch_chain_name"/>
+              <Option name="classify_str"/>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">Route through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">True</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">Route through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="tagobject_id">id449328D924380</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -51931,28 +53416,28 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
-              <Option name="branch_anchor_name"></Option>
-              <Option name="branch_chain_name"></Option>
-              <Option name="classify_str"></Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="action_on_reject"/>
+              <Option name="branch_anchor_name"/>
+              <Option name="branch_chain_name"/>
+              <Option name="classify_str"/>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">Route through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">True</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
               <Option name="ipt_oif">eth0</Option>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">Route through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -51973,28 +53458,28 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
-              <Option name="branch_anchor_name"></Option>
-              <Option name="branch_chain_name"></Option>
-              <Option name="classify_str"></Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="action_on_reject"/>
+              <Option name="branch_anchor_name"/>
+              <Option name="branch_chain_name"/>
+              <Option name="classify_str"/>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">Route through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">True</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
               <Option name="ipt_oif">eth2</Option>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">Route through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -52036,27 +53521,27 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
-              <Option name="classify_str"></Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="action_on_reject"/>
+              <Option name="classify_str"/>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">route_through</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">False</Option>
               <Option name="tagobject_id">id365999</Option>
             </PolicyRuleOptions>
@@ -52090,29 +53575,29 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
         <FirewallOptions>
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
-          <Option name="action_on_reject"></Option>
-          <Option name="activationCmd"></Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="action_on_reject"/>
+          <Option name="activationCmd"/>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">False</Option>
           <Option name="clamp_mss_to_mtu">True</Option>
           <Option name="classify_mark_terminating">False</Option>
-          <Option name="cmdline"></Option>
-          <Option name="compiler"></Option>
+          <Option name="cmdline"/>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">True</Option>
           <Option name="debug">False</Option>
           <Option name="drop_invalid">False</Option>
           <Option name="eliminate_duplicates">true</Option>
           <Option name="enable_ipv6">False</Option>
-          <Option name="epilog_script"></Option>
+          <Option name="epilog_script"/>
           <Option name="firewall_dir">/etc</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="freebsd_ip_forward">1</Option>
           <Option name="ignore_empty_groups">False</Option>
           <Option name="in_out_code">true</Option>
           <Option name="ipv4_6_order">ipv4_first</Option>
-          <Option name="limit_suffix"></Option>
+          <Option name="limit_suffix"/>
           <Option name="limit_value">0</Option>
           <Option name="linux24_ip_forward">1</Option>
           <Option name="load_modules">True</Option>
@@ -52127,11 +53612,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="loopback_interface">lo0</Option>
           <Option name="macosx_ip_forward">1</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"></Option>
+          <Option name="mgmt_addr"/>
           <Option name="mgmt_ssh">False</Option>
           <Option name="no_ipv6_default_policy">False</Option>
           <Option name="openbsd_ip_forward">1</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="pass_all_out">false</Option>
           <Option name="pf_limit_frags">5000</Option>
           <Option name="pf_limit_states">10000</Option>
@@ -52151,11 +53636,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="pix_syslog_device_id_supported">false</Option>
           <Option name="pix_use_acl_remarks">true</Option>
           <Option name="prolog_place">top</Option>
-          <Option name="prolog_script"></Option>
+          <Option name="prolog_script"/>
           <Option name="prompt1">$ </Option>
           <Option name="prompt2"> # </Option>
           <Option name="solaris_ip_forward">1</Option>
-          <Option name="sshArgs"></Option>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -52187,29 +53672,29 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="branch_id">id43867C1618346</Option>
-              <Option name="classify_str"></Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="classify_str"/>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_branch_in_mangle">False</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">none</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -52234,32 +53719,32 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
         <FirewallOptions>
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
-          <Option name="action_on_reject"></Option>
-          <Option name="activationCmd"></Option>
+          <Option name="action_on_reject"/>
+          <Option name="activationCmd"/>
           <Option name="add_mgmt_ssh_rule_when_stoped">False</Option>
           <Option name="add_rules_for_ipv6_neighbor_discovery">False</Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">True</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
           <Option name="classify_mark_terminating">False</Option>
           <Option name="clear_unknown_interfaces">False</Option>
           <Option name="cmdline">-xt</Option>
-          <Option name="compiler"></Option>
+          <Option name="compiler"/>
           <Option name="configure_bonding_interfaces">False</Option>
           <Option name="configure_bridge_interfaces">False</Option>
           <Option name="configure_interfaces">True</Option>
           <Option name="configure_vlan_interfaces">False</Option>
           <Option name="debug">False</Option>
           <Option name="drop_invalid">False</Option>
-          <Option name="epilog_script"></Option>
-          <Option name="firewall_dir"></Option>
+          <Option name="epilog_script"/>
+          <Option name="firewall_dir"/>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="flush_and_set_default_policy">True</Option>
           <Option name="ignore_empty_groups">False</Option>
           <Option name="ipv4_6_order">ipv4_first</Option>
-          <Option name="limit_suffix"></Option>
+          <Option name="limit_suffix"/>
           <Option name="limit_value">0</Option>
           <Option name="linux24_ip_forward">1</Option>
           <Option name="load_modules">True</Option>
@@ -52273,15 +53758,15 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="log_tcp_seq">False</Option>
           <Option name="loopback_interface">lo</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"></Option>
+          <Option name="mgmt_addr"/>
           <Option name="mgmt_ssh">False</Option>
           <Option name="modules_dir">/lib/modules/`uname -r`/kernel/net/</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="prolog_place">top</Option>
-          <Option name="prolog_script"></Option>
-          <Option name="scpArgs"></Option>
-          <Option name="script_name_on_firewall"></Option>
-          <Option name="sshArgs"></Option>
+          <Option name="prolog_script"/>
+          <Option name="scpArgs"/>
+          <Option name="script_name_on_firewall"/>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -52333,16 +53818,16 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="limit_value_not">False</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -52378,16 +53863,16 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="limit_value_not">False</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -52423,16 +53908,16 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="limit_value_not">False</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -52468,16 +53953,16 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="limit_value_not">False</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -52513,16 +53998,16 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="limit_value_not">False</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -52558,16 +54043,16 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="limit_value_not">False</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -52603,16 +54088,16 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="limit_value_not">False</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -52649,16 +54134,16 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="limit_value_not">False</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -52694,16 +54179,16 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="limit_value_not">False</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -52739,16 +54224,16 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="limit_value_not">False</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -52784,16 +54269,16 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="limit_value_not">False</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -52829,16 +54314,16 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="limit_value_not">False</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -52874,16 +54359,16 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="limit_value_not">False</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -52919,16 +54404,16 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="limit_value_not">False</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -52950,29 +54435,29 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="branch_id">id1825785X7324</Option>
-              <Option name="classify_str"></Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="classify_str"/>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_branch_in_mangle">False</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">none</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -52993,29 +54478,29 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="branch_id">id1825785X7324</Option>
-              <Option name="classify_str"></Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="classify_str"/>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_branch_in_mangle">False</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">none</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -53056,16 +54541,16 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="limit_value_not">False</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -53102,16 +54587,16 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="limit_value_not">False</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -53139,20 +54624,20 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
         <FirewallOptions>
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
-          <Option name="action_on_reject"></Option>
-          <Option name="activationCmd"></Option>
+          <Option name="action_on_reject"/>
+          <Option name="activationCmd"/>
           <Option name="add_check_state_rule">true</Option>
           <Option name="add_mgmt_ssh_rule_when_stoped">False</Option>
           <Option name="add_rules_for_ipv6_neighbor_discovery">True</Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">False</Option>
           <Option name="clamp_mss_to_mtu">True</Option>
           <Option name="classify_mark_terminating">False</Option>
           <Option name="clear_unknown_interfaces">False</Option>
           <Option name="cmdline">-xt</Option>
-          <Option name="compiler"></Option>
+          <Option name="compiler"/>
           <Option name="configure_bonding_interfaces">False</Option>
           <Option name="configure_bridge_interfaces">False</Option>
           <Option name="configure_interfaces">True</Option>
@@ -53161,7 +54646,7 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="drop_invalid">True</Option>
           <Option name="eliminate_duplicates">true</Option>
           <Option name="enable_ipv6">True</Option>
-          <Option name="epilog_script"></Option>
+          <Option name="epilog_script"/>
           <Option name="firewall_dir">/etc</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="freebsd_ip_forward">1</Option>
@@ -53170,36 +54655,36 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="iosacl_add_clear_statements">true</Option>
           <Option name="iosacl_assume_fw_part_of_any">true</Option>
           <Option name="iosacl_include_comments">true</Option>
-          <Option name="ipt_mangle_only_rulesets"></Option>
+          <Option name="ipt_mangle_only_rulesets"/>
           <Option name="ipv4_6_order">ipv4_first</Option>
-          <Option name="limit_suffix"></Option>
+          <Option name="limit_suffix"/>
           <Option name="limit_value">0</Option>
-          <Option name="linux24_accept_redirects"></Option>
-          <Option name="linux24_accept_source_route"></Option>
-          <Option name="linux24_icmp_echo_ignore_all"></Option>
-          <Option name="linux24_icmp_echo_ignore_broadcasts"></Option>
-          <Option name="linux24_icmp_ignore_bogus_error_responses"></Option>
-          <Option name="linux24_ip_dynaddr"></Option>
+          <Option name="linux24_accept_redirects"/>
+          <Option name="linux24_accept_source_route"/>
+          <Option name="linux24_icmp_echo_ignore_all"/>
+          <Option name="linux24_icmp_echo_ignore_broadcasts"/>
+          <Option name="linux24_icmp_ignore_bogus_error_responses"/>
+          <Option name="linux24_ip_dynaddr"/>
           <Option name="linux24_ip_forward">1</Option>
           <Option name="linux24_ipv6_forward">1</Option>
-          <Option name="linux24_log_martians"></Option>
-          <Option name="linux24_path_ip"></Option>
-          <Option name="linux24_path_ip6tables"></Option>
-          <Option name="linux24_path_ip6tables_restore"></Option>
-          <Option name="linux24_path_iptables"></Option>
-          <Option name="linux24_path_iptables_restore"></Option>
-          <Option name="linux24_path_logger"></Option>
-          <Option name="linux24_path_lsmod"></Option>
-          <Option name="linux24_path_modprobe"></Option>
-          <Option name="linux24_rp_filter"></Option>
-          <Option name="linux24_tcp_ecn"></Option>
-          <Option name="linux24_tcp_fack"></Option>
+          <Option name="linux24_log_martians"/>
+          <Option name="linux24_path_ip"/>
+          <Option name="linux24_path_ip6tables"/>
+          <Option name="linux24_path_ip6tables_restore"/>
+          <Option name="linux24_path_iptables"/>
+          <Option name="linux24_path_iptables_restore"/>
+          <Option name="linux24_path_logger"/>
+          <Option name="linux24_path_lsmod"/>
+          <Option name="linux24_path_modprobe"/>
+          <Option name="linux24_rp_filter"/>
+          <Option name="linux24_tcp_ecn"/>
+          <Option name="linux24_tcp_fack"/>
           <Option name="linux24_tcp_fin_timeout">0</Option>
           <Option name="linux24_tcp_keepalive_interval">0</Option>
-          <Option name="linux24_tcp_sack"></Option>
-          <Option name="linux24_tcp_syncookies"></Option>
-          <Option name="linux24_tcp_timestamps"></Option>
-          <Option name="linux24_tcp_window_scaling"></Option>
+          <Option name="linux24_tcp_sack"/>
+          <Option name="linux24_tcp_syncookies"/>
+          <Option name="linux24_tcp_timestamps"/>
+          <Option name="linux24_tcp_window_scaling"/>
           <Option name="load_modules">True</Option>
           <Option name="local_nat">False</Option>
           <Option name="log_all">False</Option>
@@ -53212,11 +54697,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="loopback_interface">lo0</Option>
           <Option name="macosx_ip_forward">1</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"></Option>
+          <Option name="mgmt_addr"/>
           <Option name="mgmt_ssh">False</Option>
           <Option name="no_ipv6_default_policy">False</Option>
           <Option name="openbsd_ip_forward">1</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="pass_all_out">false</Option>
           <Option name="pf_limit_frags">5000</Option>
           <Option name="pf_limit_states">10000</Option>
@@ -53236,13 +54721,13 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="pix_syslog_device_id_supported">false</Option>
           <Option name="pix_use_acl_remarks">true</Option>
           <Option name="prolog_place">top</Option>
-          <Option name="prolog_script"></Option>
+          <Option name="prolog_script"/>
           <Option name="prompt1">$ </Option>
           <Option name="prompt2"> # </Option>
-          <Option name="scpArgs"></Option>
-          <Option name="script_name_on_firewall"></Option>
+          <Option name="scpArgs"/>
+          <Option name="script_name_on_firewall"/>
           <Option name="solaris_ip_forward">1</Option>
-          <Option name="sshArgs"></Option>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -53273,6 +54758,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id654713X7324" disabled="False" group="" position="1" action="Translate" comment="Translate source address&#10;for outgoing connections">
@@ -53295,6 +54783,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id654747X7324" disabled="False" group="" position="2" action="Translate" comment="">
@@ -53316,6 +54807,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <RuleSetOptions/>
@@ -53433,7 +54927,7 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="connlimit_above_not">False</Option>
               <Option name="connlimit_masklen">0</Option>
               <Option name="connlimit_value">0</Option>
-              <Option name="firewall_is_part_of_any_and_networks"></Option>
+              <Option name="firewall_is_part_of_any_and_networks"/>
               <Option name="hashlimit_burst">0</Option>
               <Option name="hashlimit_dstlimit">False</Option>
               <Option name="hashlimit_expire">0</Option>
@@ -53443,16 +54937,16 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="limit_value_not">False</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -53532,7 +55026,7 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="connlimit_above_not">False</Option>
               <Option name="connlimit_masklen">0</Option>
               <Option name="connlimit_value">0</Option>
-              <Option name="firewall_is_part_of_any_and_networks"></Option>
+              <Option name="firewall_is_part_of_any_and_networks"/>
               <Option name="hashlimit_burst">0</Option>
               <Option name="hashlimit_dstlimit">False</Option>
               <Option name="hashlimit_expire">0</Option>
@@ -53542,16 +55036,16 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="limit_value_not">False</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -53594,7 +55088,7 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="connlimit_above_not">False</Option>
               <Option name="connlimit_masklen">0</Option>
               <Option name="connlimit_value">0</Option>
-              <Option name="firewall_is_part_of_any_and_networks"></Option>
+              <Option name="firewall_is_part_of_any_and_networks"/>
               <Option name="hashlimit_burst">0</Option>
               <Option name="hashlimit_dstlimit">False</Option>
               <Option name="hashlimit_expire">0</Option>
@@ -53604,16 +55098,16 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="limit_value_not">False</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -53641,7 +55135,7 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="connlimit_above_not">False</Option>
               <Option name="connlimit_masklen">0</Option>
               <Option name="connlimit_value">0</Option>
-              <Option name="firewall_is_part_of_any_and_networks"></Option>
+              <Option name="firewall_is_part_of_any_and_networks"/>
               <Option name="hashlimit_burst">0</Option>
               <Option name="hashlimit_dstlimit">False</Option>
               <Option name="hashlimit_expire">0</Option>
@@ -53651,16 +55145,16 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="limit_value_not">False</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -53682,29 +55176,29 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="branch_id">id654844X7324</Option>
-              <Option name="classify_str"></Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="classify_str"/>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_branch_in_mangle">False</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">none</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -53745,16 +55239,16 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="limit_value_not">False</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -53779,7 +55273,7 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="connlimit_above_not">False</Option>
               <Option name="connlimit_masklen">0</Option>
               <Option name="connlimit_value">0</Option>
-              <Option name="firewall_is_part_of_any_and_networks"></Option>
+              <Option name="firewall_is_part_of_any_and_networks"/>
               <Option name="hashlimit_burst">0</Option>
               <Option name="hashlimit_dstlimit">False</Option>
               <Option name="hashlimit_expire">0</Option>
@@ -53789,16 +55283,16 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="limit_value_not">False</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">True</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -53835,19 +55329,19 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
         <FirewallOptions>
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
-          <Option name="action_on_reject"></Option>
-          <Option name="activationCmd"></Option>
+          <Option name="action_on_reject"/>
+          <Option name="activationCmd"/>
           <Option name="add_mgmt_ssh_rule_when_stoped">False</Option>
           <Option name="add_rules_for_ipv6_neighbor_discovery">False</Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">False</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
           <Option name="classify_mark_terminating">False</Option>
           <Option name="clear_unknown_interfaces">False</Option>
-          <Option name="cmdline"></Option>
-          <Option name="compiler"></Option>
+          <Option name="cmdline"/>
+          <Option name="compiler"/>
           <Option name="configure_bonding_interfaces">False</Option>
           <Option name="configure_bridge_interfaces">False</Option>
           <Option name="configure_interfaces">True</Option>
@@ -53855,14 +55349,14 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="debug">False</Option>
           <Option name="drop_invalid">False</Option>
           <Option name="eliminate_duplicates">true</Option>
-          <Option name="epilog_script"></Option>
+          <Option name="epilog_script"/>
           <Option name="firewall_dir">/etc</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="flush_and_set_default_policy">True</Option>
           <Option name="freebsd_ip_forward">1</Option>
           <Option name="ignore_empty_groups">False</Option>
           <Option name="ipv4_6_order">ipv4_first</Option>
-          <Option name="limit_suffix"></Option>
+          <Option name="limit_suffix"/>
           <Option name="limit_value">0</Option>
           <Option name="linux24_ip_forward">1</Option>
           <Option name="load_modules">True</Option>
@@ -53877,11 +55371,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="loopback_interface">lo</Option>
           <Option name="macosx_ip_forward">1</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"></Option>
+          <Option name="mgmt_addr"/>
           <Option name="mgmt_ssh">False</Option>
           <Option name="modules_dir">/lib/modules/`uname -r`/kernel/net/</Option>
           <Option name="openbsd_ip_forward">1</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="pf_limit_frags">5000</Option>
           <Option name="pf_limit_states">10000</Option>
           <Option name="pf_timeout_frag">30</Option>
@@ -53899,11 +55393,11 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="pix_syslog_device_id_supported">false</Option>
           <Option name="pix_use_acl_remarks">true</Option>
           <Option name="prolog_place">top</Option>
-          <Option name="prolog_script"></Option>
-          <Option name="scpArgs"></Option>
-          <Option name="script_name_on_firewall"></Option>
+          <Option name="prolog_script"/>
+          <Option name="scpArgs"/>
+          <Option name="script_name_on_firewall"/>
           <Option name="solaris_ip_forward">1</Option>
-          <Option name="sshArgs"></Option>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -53934,6 +55428,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id2287813X9995" disabled="False" group="" position="1" action="Translate" comment="">
@@ -53955,6 +55452,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id985500X9995" disabled="False" group="" position="2" action="Translate" comment="">
@@ -53976,6 +55476,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <RuleSetOptions/>
@@ -54019,7 +55522,7 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="connlimit_above_not">False</Option>
               <Option name="connlimit_masklen">0</Option>
               <Option name="connlimit_value">0</Option>
-              <Option name="firewall_is_part_of_any_and_networks"></Option>
+              <Option name="firewall_is_part_of_any_and_networks"/>
               <Option name="hashlimit_burst">0</Option>
               <Option name="hashlimit_dstlimit">False</Option>
               <Option name="hashlimit_expire">0</Option>
@@ -54029,16 +55532,16 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="limit_value_not">False</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">False</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -54073,16 +55576,16 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="limit_value_not">False</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">False</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -54172,16 +55675,16 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="limit_value_not">False</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">False</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -54246,19 +55749,19 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
         <FirewallOptions>
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
-          <Option name="action_on_reject"></Option>
-          <Option name="activationCmd"></Option>
+          <Option name="action_on_reject"/>
+          <Option name="activationCmd"/>
           <Option name="add_mgmt_ssh_rule_when_stoped">False</Option>
           <Option name="add_rules_for_ipv6_neighbor_discovery">False</Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">True</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
           <Option name="classify_mark_terminating">False</Option>
           <Option name="clear_unknown_interfaces">False</Option>
-          <Option name="cmdline"></Option>
-          <Option name="compiler"></Option>
+          <Option name="cmdline"/>
+          <Option name="compiler"/>
           <Option name="configure_bonding_interfaces">False</Option>
           <Option name="configure_bridge_interfaces">False</Option>
           <Option name="configure_interfaces">True</Option>
@@ -54266,14 +55769,14 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="debug">False</Option>
           <Option name="drop_invalid">False</Option>
           <Option name="eliminate_duplicates">true</Option>
-          <Option name="epilog_script"></Option>
+          <Option name="epilog_script"/>
           <Option name="firewall_dir">/etc</Option>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="freebsd_ip_forward">1</Option>
           <Option name="ignore_empty_groups">False</Option>
           <Option name="in_out_code">true</Option>
           <Option name="ipv4_6_order">ipv4_first</Option>
-          <Option name="limit_suffix"></Option>
+          <Option name="limit_suffix"/>
           <Option name="limit_value">0</Option>
           <Option name="linux24_ip_forward">1</Option>
           <Option name="load_modules">True</Option>
@@ -54288,10 +55791,10 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="loopback_interface">lo0</Option>
           <Option name="macosx_ip_forward">1</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"></Option>
+          <Option name="mgmt_addr"/>
           <Option name="mgmt_ssh">False</Option>
           <Option name="openbsd_ip_forward">1</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="pass_all_out">false</Option>
           <Option name="pf_limit_frags">5000</Option>
           <Option name="pf_limit_states">10000</Option>
@@ -54311,13 +55814,13 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="pix_syslog_device_id_supported">false</Option>
           <Option name="pix_use_acl_remarks">true</Option>
           <Option name="prolog_place">top</Option>
-          <Option name="prolog_script"></Option>
+          <Option name="prolog_script"/>
           <Option name="prompt1">$ </Option>
           <Option name="prompt2"> # </Option>
-          <Option name="scpArgs"></Option>
-          <Option name="script_name_on_firewall"></Option>
+          <Option name="scpArgs"/>
+          <Option name="script_name_on_firewall"/>
           <Option name="solaris_ip_forward">1</Option>
-          <Option name="sshArgs"></Option>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -54349,6 +55852,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id2101361X9995" disabled="False" group="" position="1" action="Translate" comment="">
@@ -54370,6 +55876,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id1543070X9995" disabled="False" group="" position="2" action="Translate" comment="">
@@ -54391,6 +55900,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <RuleSetOptions/>
@@ -54434,7 +55946,7 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="connlimit_above_not">False</Option>
               <Option name="connlimit_masklen">0</Option>
               <Option name="connlimit_value">0</Option>
-              <Option name="firewall_is_part_of_any_and_networks"></Option>
+              <Option name="firewall_is_part_of_any_and_networks"/>
               <Option name="hashlimit_burst">0</Option>
               <Option name="hashlimit_dstlimit">False</Option>
               <Option name="hashlimit_expire">0</Option>
@@ -54444,16 +55956,16 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="limit_value_not">False</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">False</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -54488,16 +56000,16 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="limit_value_not">False</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">False</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -54587,16 +56099,16 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <Option name="hashlimit_mode_dstport">False</Option>
               <Option name="hashlimit_mode_srcip">False</Option>
               <Option name="hashlimit_mode_srcport">False</Option>
-              <Option name="hashlimit_name"></Option>
+              <Option name="hashlimit_name"/>
               <Option name="hashlimit_size">0</Option>
-              <Option name="hashlimit_suffix"></Option>
+              <Option name="hashlimit_suffix"/>
               <Option name="hashlimit_value">0</Option>
               <Option name="limit_burst">0</Option>
-              <Option name="limit_suffix"></Option>
+              <Option name="limit_suffix"/>
               <Option name="limit_value">0</Option>
               <Option name="limit_value_not">False</Option>
-              <Option name="log_level"></Option>
-              <Option name="log_prefix"></Option>
+              <Option name="log_level"/>
+              <Option name="log_prefix"/>
               <Option name="stateless">False</Option>
               <Option name="ulog_nlgroup">1</Option>
             </PolicyRuleOptions>
@@ -54729,29 +56241,29 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="branch_id">id58582X22302</Option>
-              <Option name="classify_str"></Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="classify_str"/>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_branch_in_mangle">False</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">none</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -54772,29 +56284,29 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="branch_id">id58643X22302</Option>
-              <Option name="classify_str"></Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="classify_str"/>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_branch_in_mangle">False</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">none</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -54815,29 +56327,29 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="branch_id">id58474X22302</Option>
-              <Option name="classify_str"></Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="classify_str"/>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_branch_in_mangle">False</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">none</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -54951,6 +56463,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="sysid1"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <RuleSetOptions/>
@@ -54973,29 +56488,29 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="branch_id">id58474X22302</Option>
-              <Option name="classify_str"></Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="classify_str"/>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_branch_in_mangle">False</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">none</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -55024,7 +56539,7 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="accept_established">true</Option>
           <Option name="accept_new_tcp_with_no_syn">true</Option>
           <Option name="check_shading">true</Option>
-          <Option name="compiler"></Option>
+          <Option name="compiler"/>
           <Option name="configure_interfaces">true</Option>
           <Option name="eliminate_duplicates">true</Option>
           <Option name="firewall_dir">/etc</Option>
@@ -55147,32 +56662,32 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
         <FirewallOptions>
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
-          <Option name="action_on_reject"></Option>
-          <Option name="activationCmd"></Option>
+          <Option name="action_on_reject"/>
+          <Option name="activationCmd"/>
           <Option name="add_mgmt_ssh_rule_when_stoped">False</Option>
           <Option name="add_rules_for_ipv6_neighbor_discovery">False</Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">True</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
           <Option name="classify_mark_terminating">False</Option>
           <Option name="clear_unknown_interfaces">False</Option>
-          <Option name="cmdline"></Option>
-          <Option name="compiler"></Option>
+          <Option name="cmdline"/>
+          <Option name="compiler"/>
           <Option name="configure_bonding_interfaces">False</Option>
           <Option name="configure_bridge_interfaces">False</Option>
           <Option name="configure_interfaces">True</Option>
           <Option name="configure_vlan_interfaces">False</Option>
           <Option name="debug">False</Option>
           <Option name="drop_invalid">False</Option>
-          <Option name="epilog_script"></Option>
-          <Option name="firewall_dir"></Option>
+          <Option name="epilog_script"/>
+          <Option name="firewall_dir"/>
           <Option name="firewall_is_part_of_any_and_networks">False</Option>
           <Option name="flush_and_set_default_policy">True</Option>
           <Option name="ignore_empty_groups">False</Option>
           <Option name="ipv4_6_order">ipv4_first</Option>
-          <Option name="limit_suffix"></Option>
+          <Option name="limit_suffix"/>
           <Option name="limit_value">0</Option>
           <Option name="linux24_ip_forward">1</Option>
           <Option name="load_modules">True</Option>
@@ -55186,15 +56701,15 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="log_tcp_seq">False</Option>
           <Option name="loopback_interface">lo</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"></Option>
+          <Option name="mgmt_addr"/>
           <Option name="mgmt_ssh">False</Option>
           <Option name="modules_dir">/lib/modules/`uname -r`/kernel/net/</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="prolog_place">top</Option>
-          <Option name="prolog_script"></Option>
-          <Option name="scpArgs"></Option>
-          <Option name="script_name_on_firewall"></Option>
-          <Option name="sshArgs"></Option>
+          <Option name="prolog_script"/>
+          <Option name="scpArgs"/>
+          <Option name="script_name_on_firewall"/>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -55289,32 +56804,32 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
         <FirewallOptions>
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
-          <Option name="action_on_reject"></Option>
-          <Option name="activationCmd"></Option>
+          <Option name="action_on_reject"/>
+          <Option name="activationCmd"/>
           <Option name="add_mgmt_ssh_rule_when_stoped">False</Option>
           <Option name="add_rules_for_ipv6_neighbor_discovery">False</Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">True</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
           <Option name="classify_mark_terminating">False</Option>
           <Option name="clear_unknown_interfaces">False</Option>
-          <Option name="cmdline"></Option>
-          <Option name="compiler"></Option>
+          <Option name="cmdline"/>
+          <Option name="compiler"/>
           <Option name="configure_bonding_interfaces">False</Option>
           <Option name="configure_bridge_interfaces">False</Option>
           <Option name="configure_interfaces">True</Option>
           <Option name="configure_vlan_interfaces">False</Option>
           <Option name="debug">False</Option>
           <Option name="drop_invalid">False</Option>
-          <Option name="epilog_script"></Option>
-          <Option name="firewall_dir"></Option>
+          <Option name="epilog_script"/>
+          <Option name="firewall_dir"/>
           <Option name="firewall_is_part_of_any_and_networks">False</Option>
           <Option name="flush_and_set_default_policy">True</Option>
           <Option name="ignore_empty_groups">False</Option>
           <Option name="ipv4_6_order">ipv4_first</Option>
-          <Option name="limit_suffix"></Option>
+          <Option name="limit_suffix"/>
           <Option name="limit_value">0</Option>
           <Option name="linux24_ip_forward">1</Option>
           <Option name="load_modules">True</Option>
@@ -55328,15 +56843,15 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="log_tcp_seq">False</Option>
           <Option name="loopback_interface">lo</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"></Option>
+          <Option name="mgmt_addr"/>
           <Option name="mgmt_ssh">False</Option>
           <Option name="modules_dir">/lib/modules/`uname -r`/kernel/net/</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="prolog_place">top</Option>
-          <Option name="prolog_script"></Option>
-          <Option name="scpArgs"></Option>
-          <Option name="script_name_on_firewall"></Option>
-          <Option name="sshArgs"></Option>
+          <Option name="prolog_script"/>
+          <Option name="scpArgs"/>
+          <Option name="script_name_on_firewall"/>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
@@ -55368,6 +56883,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="udp-DNS"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id630920X9517" disabled="False" group="" position="1" action="Translate" comment="">
@@ -55389,6 +56907,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="id1195021X6573"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <NATRule id="id630866X9517" disabled="False" group="" position="2" action="Translate" comment="">
@@ -55410,6 +56931,9 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
             <TSrv neg="False">
               <ServiceRef ref="id1195021X6573"/>
             </TSrv>
+            <ItfInb neg="False"><ObjectRef ref="sysid0"/></ItfInb>
+            <ItfOutb neg="False"><ObjectRef ref="sysid0"/></ItfOutb>
+            
             <NATRuleOptions/>
           </NATRule>
           <RuleSetOptions/>
@@ -55453,29 +56977,29 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
               <IntervalRef ref="sysid2"/>
             </When>
             <PolicyRuleOptions>
-              <Option name="action_on_reject"></Option>
+              <Option name="action_on_reject"/>
               <Option name="branch_id">id1009662X9517</Option>
-              <Option name="classify_str"></Option>
-              <Option name="custom_str"></Option>
-              <Option name="ipf_route_opt_addr"></Option>
-              <Option name="ipf_route_opt_if"></Option>
+              <Option name="classify_str"/>
+              <Option name="custom_str"/>
+              <Option name="ipf_route_opt_addr"/>
+              <Option name="ipf_route_opt_if"/>
               <Option name="ipf_route_option">route_through</Option>
               <Option name="ipfw_classify_method">2</Option>
               <Option name="ipfw_pipe_port_num">0</Option>
               <Option name="ipfw_pipe_queue_num">0</Option>
               <Option name="ipt_branch_in_mangle">False</Option>
               <Option name="ipt_continue">False</Option>
-              <Option name="ipt_gw"></Option>
-              <Option name="ipt_iif"></Option>
+              <Option name="ipt_gw"/>
+              <Option name="ipt_iif"/>
               <Option name="ipt_mark_connections">False</Option>
-              <Option name="ipt_oif"></Option>
+              <Option name="ipt_oif"/>
               <Option name="ipt_tee">False</Option>
               <Option name="pf_fastroute">False</Option>
               <Option name="pf_route_load_option">none</Option>
-              <Option name="pf_route_opt_addr"></Option>
-              <Option name="pf_route_opt_if"></Option>
+              <Option name="pf_route_opt_addr"/>
+              <Option name="pf_route_opt_if"/>
               <Option name="pf_route_option">none</Option>
-              <Option name="rule_name_accounting"></Option>
+              <Option name="rule_name_accounting"/>
               <Option name="stateless">True</Option>
             </PolicyRuleOptions>
           </PolicyRule>
@@ -55544,32 +57068,32 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
         <FirewallOptions>
           <Option name="accept_established">True</Option>
           <Option name="accept_new_tcp_with_no_syn">True</Option>
-          <Option name="action_on_reject"></Option>
-          <Option name="activationCmd"></Option>
+          <Option name="action_on_reject"/>
+          <Option name="activationCmd"/>
           <Option name="add_mgmt_ssh_rule_when_stoped">False</Option>
           <Option name="add_rules_for_ipv6_neighbor_discovery">False</Option>
-          <Option name="admUser"></Option>
-          <Option name="altAddress"></Option>
+          <Option name="admUser"/>
+          <Option name="altAddress"/>
           <Option name="bridging_fw">False</Option>
           <Option name="check_shading">False</Option>
           <Option name="clamp_mss_to_mtu">False</Option>
           <Option name="classify_mark_terminating">False</Option>
           <Option name="clear_unknown_interfaces">False</Option>
-          <Option name="cmdline"></Option>
-          <Option name="compiler"></Option>
+          <Option name="cmdline"/>
+          <Option name="compiler"/>
           <Option name="configure_bonding_interfaces">False</Option>
           <Option name="configure_bridge_interfaces">False</Option>
           <Option name="configure_interfaces">True</Option>
           <Option name="configure_vlan_interfaces">False</Option>
           <Option name="debug">False</Option>
           <Option name="drop_invalid">False</Option>
-          <Option name="epilog_script"></Option>
-          <Option name="firewall_dir"></Option>
+          <Option name="epilog_script"/>
+          <Option name="firewall_dir"/>
           <Option name="firewall_is_part_of_any_and_networks">True</Option>
           <Option name="flush_and_set_default_policy">True</Option>
           <Option name="ignore_empty_groups">False</Option>
           <Option name="ipv4_6_order">ipv4_first</Option>
-          <Option name="limit_suffix"></Option>
+          <Option name="limit_suffix"/>
           <Option name="limit_value">0</Option>
           <Option name="linux24_ip_forward">1</Option>
           <Option name="load_modules">True</Option>
@@ -55583,15 +57107,15 @@ echo '%FWBPROMPT%'; sh /tmp/%FWSCRIPT%
           <Option name="log_tcp_seq">False</Option>
           <Option name="loopback_interface">lo</Option>
           <Option name="manage_virtual_addr">True</Option>
-          <Option name="mgmt_addr"></Option>
+          <Option name="mgmt_addr"/>
           <Option name="mgmt_ssh">False</Option>
           <Option name="modules_dir">/lib/modules/`uname -r`/kernel/net/</Option>
-          <Option name="output_file"></Option>
+          <Option name="output_file"/>
           <Option name="prolog_place">top</Option>
-          <Option name="prolog_script"></Option>
-          <Option name="scpArgs"></Option>
-          <Option name="script_name_on_firewall"></Option>
-          <Option name="sshArgs"></Option>
+          <Option name="prolog_script"/>
+          <Option name="scpArgs"/>
+          <Option name="script_name_on_firewall"/>
+          <Option name="sshArgs"/>
           <Option name="ulog_cprange">0</Option>
           <Option name="ulog_nlgroup">1</Option>
           <Option name="ulog_qthreshold">1</Option>
diff --git a/test/ipt/rc.firewall.local b/test/ipt/rc.firewall.local
index 4c1e6d326..e7eb88a8c 100755
--- a/test/ipt/rc.firewall.local
+++ b/test/ipt/rc.firewall.local
@@ -2,9 +2,9 @@
 #
 #  This is automatically generated file. DO NOT MODIFY !
 #
-#  Firewall Builder  fwb_ipt v4.2.0.3477
+#  Firewall Builder  fwb_ipt v4.2.0.3480
 #
-#  Generated Tue Feb 15 14:28:49 2011 PST by vadim
+#  Generated Thu Feb 17 15:16:56 2011 PST by vadim
 #
 # files: * rc.firewall.local /etc/rc.d//rc.firewall.local
 #