[container_to_host]
default_policy = "accept"

[[container_to_host.rules]]
network = "network"
src_container = "src_container"
matches = "FILTER"
verdict = "accept"