firewall packet-filter default permit interzone local trust从local到trust全开
firewall packet-filter default permit interzone ^pn-instance 123 dmz trust从^pn实例123下的dmz到trust全开
备注:^倒过来写