D ;;; special dummy rule to show fasttrack counters
      chain=forward action=passthrough 
 1    ;;; defconf: accept ICMP
      chain=input action=accept protocol=icmp 
 2    ;;; defconf: accept established,related
      chain=input action=accept connection-state=established,related 
 3    ;;; defconf: drop all from WAN
      chain=input action=drop in-interface=ether1 
 4    ;;; defconf: fasttrack
      chain=forward action=fasttrack-connection 
      connection-state=established,related 
 5    ;;; defconf: accept established,related
      chain=forward action=accept connection-state=established,related 
 6    ;;; defconf: drop invalid
      chain=forward action=drop connection-state=invalid
 7    ;;; defconf:  drop all from WAN not DSTNATed
      chain=forward action=drop connection-state=new 
      connection-nat-state=!dstnat in-interface=ether1