1. Allow SSH from LAN2 to LAN 3 only LAN2 LAN3 SSH Accept * LAN3 SSH Reject 2. Allow DNS from anywhere to anywhere ... 7. Allow SSH from LAN1 to LAN 3 LAN1 LAN3 SSH Accept