config rule
        option enabled '1'
        option target 'ACCEPT'
        option src 'wan'
        option proto 'tcp'
        option dest_port '22'
        option name 'ciralabs22'
        option family 'ipv4'
        option src_ip '172.16.0.0/16'