フィルタの設定はここになると思っています
ip filter 1 reject * * tcp,udp 135,netbios_ns-netbios_ssn,445 *
ip filter 2 reject * * tcp,udp * 135,netbios_ns-netbios_ssn,445
ip filter 10 reject 192.168.3.0/24 *
ip filter 11 pass * 192.168.3.0/24 icmp
ip filter 12 pass * 192.168.3.0/24 established
ip filter 13 pass * 192.168.3.0/24 udp domain *
ip filter 14 pass * 192.168.3.0/24 tcp * ident
ip filter 15 pass * 192.168.3.0/24 tcp ftpdata *
ip filter 20 pass * 192.168.3.254 udp * 500
ip filter 21 pass * 192.168.3.254 esp
ip filter 100 pass * *