firewall packet-filter default permit interzone local trust
从local到trust全开

firewall packet-filter default permit interzone ^pn-instance 123 dmz trust
从^pn实例123下的dmz到trust全开

备注：^倒过来写