+* allow all outgoing traffic
+* allow incoming ICMP
+* allow incoming tcp/22 (ssh)
+* allow all incoming from
+ * bytemark: 5.153.231.0/24
+ * grnet: 194.177.211.192/27
+ * man-da: 82.195.75.64/26
+ * sil: 86.59.118.144/28
+ * ubcece: 206.12.19.0/24
+ * ubc: 209.87.16.0/24
+ * bytemark: 2001:41c8:1000::/48
+ * grnet: 2001:648:2ffc:deb::/64
+ * man-da: 2001:41b8:202:deb::/64
+ * sil: 2001:858:2:2::/64
+ * ubcece: 2607:f8f0:610:4000::/64
+ * ubc: 2607:F8F0:614:1::/64
+* allow all return traffic on tcp/udp/etc.