What is the syntax for the playit tunnel firewalls?

Under setting-> Firewalls-> Create, what is the syntax for allowing/denying/default rules?