tcp and (ether src INTERNET-FIREWALL-GATE-ETHADDR and src net INTERNAL )
