%rule-set% %from-zone% %to-zone% %rule-name% %private-subnet% %pool-name%