firewall packet-filter default permit interzone local trust
从local到trust全开
firewall packet-filter default permit interzone ^pn-instance 123 dmz trust
从^pn实例123下的dmz到trust全开
备注：^倒过来写
来源：51CTO
作者：wangheyu1
链接：https://blog.51cto.com/wangheyu1/2455850