(version 1)
(allow network-inbound
       (local tcp "*:*")
       (local udp "*:*")
       (local udp "localhost:*")
)
(allow network-outbound
       (literal "/private/var/run/mDNSResponder")
       (remote tcp "*:*")
       (remote udp "localhost:*"))
(allow default)
; all|allow