Something

version 5

interface eth0 lan
        policy reject
        protection full
        server ping accept
        server ssh accept
        server http accept
        server cups accept
        server ident accept
        server samba accept
        server custom netcat tcp/11235 default accept
        server custom bittorrent     tcp/6881:6999 default accept
        server custom bittorrent_udp udp/6881:6999 default accept
        client all accept