
extNaclC.addSC("default", "Set a command to its defaults");
extNaclC.addSC("deny", "Specify packets to reject");
	extNaclC.deny.addSC("<0-255>", "An IP protocol number");
		extNaclC.deny["<0-255>"].addSC("A.B.C.D", "Source address");
			extNaclC.deny["<0-255>"]["A.B.C.D"].addSC("A.B.C.D", "Source wildcard bits");
				extNaclC.deny["<0-255>"]["A.B.C.D"]["A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.deny["<0-255>"]["A.B.C.D"]["A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.deny["<0-255>"]["A.B.C.D"]["A.B.C.D"].addSC("host", "A single destination host");
		extNaclC.deny["<0-255>"].addSC("any", "Any source host");
			extNaclC.deny["<0-255>"].any.addSC("A.B.C.D", "Destination address");
				extNaclC.deny["<0-255>"].any["A.B.C.D"].addSC("A.B.C.D", "Destination wildcard bits");
			extNaclC.deny["<0-255>"].any.addSC("any", "Any destination host");
			extNaclC.deny["<0-255>"].any.addSC("host", "A single destination host");
				extNaclC.deny["<0-255>"].any.host.addSC("Hostname or A.B.C.D", "Destination address");
		extNaclC.deny["<0-255>"].addSC("host", "A single source host");
			extNaclC.deny["<0-255>"].host.addSC("Hostname or A.B.C.D", "Source address");
				extNaclC.deny["<0-255>"].host["Hostname or A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.deny["<0-255>"].host["Hostname or A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.deny["<0-255>"].host["Hostname or A.B.C.D"].addSC("host", "A single destination host");
	extNaclC.deny.addSC("eigrp", "Cisco's EIGRP routing protocol");
		extNaclC.deny.eigrp.addSC("A.B.C.D", "Source address");
			extNaclC.deny.eigrp["A.B.C.D"].addSC("A.B.C.D", "Source wildcard bits");
				extNaclC.deny.eigrp["A.B.C.D"]["A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.deny.eigrp["A.B.C.D"]["A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.deny.eigrp["A.B.C.D"]["A.B.C.D"].addSC("host", "A single destination host");
		extNaclC.deny.eigrp.addSC("any", "Any source host");
			extNaclC.deny.eigrp.any.addSC("A.B.C.D", "Destination address");
				extNaclC.deny.eigrp.any["A.B.C.D"].addSC("A.B.C.D", "Destination wildcard bits");
			extNaclC.deny.eigrp.any.addSC("any", "Any destination host");
		extNaclC.deny.eigrp.addSC("host", "A single source host");
			extNaclC.deny.eigrp.host.addSC("Hostname or A.B.C.D", "Source address");
				extNaclC.deny.eigrp.host["Hostname or A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.deny.eigrp.host["Hostname or A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.deny.eigrp.host["Hostname or A.B.C.D"].addSC("host", "A single destination host");
	extNaclC.deny.addSC("gre", "Cisco's GRE tunneling");
	extNaclC.deny.addSC("icmp", "Internet Control Message Protocol");
		extNaclC.deny.icmp.addSC("A.B.C.D", "Source address");
			extNaclC.deny.icmp["A.B.C.D"].addSC("A.B.C.D", "Source wildcard bits");
				extNaclC.deny.icmp["A.B.C.D"]["A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.deny.icmp["A.B.C.D"]["A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.deny.icmp["A.B.C.D"]["A.B.C.D"].addSC("host", "A single destination host");
		extNaclC.deny.icmp.addSC("any", "Any source host");
			extNaclC.deny.icmp.any.addSC("A.B.C.D", "Destination address");
				extNaclC.deny.icmp.any["A.B.C.D"].addSC("A.B.C.D", "Destination wildcard bits");
			extNaclC.deny.icmp.any.addSC("any", "Any destination host");
				extNaclC.deny.icmp.any.any.addSC("<0-255>", "ICMP message type");
			extNaclC.deny.icmp.any.addSC("host", "A single destination host");
				extNaclC.deny.icmp.any.host.addSC("Hostname or A.B.C.D", "Destination address");
		extNaclC.deny.icmp.addSC("host", "A single source host");
			extNaclC.deny.icmp.host.addSC("Hostname or A.B.C.D", "Source address");
				extNaclC.deny.icmp.host["Hostname or A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.deny.icmp.host["Hostname or A.B.C.D"].addSC("any", "Any destination host");
	extNaclC.deny.addSC("igmp", "Internet Gateway Message Protocol");
		extNaclC.deny.igmp.addSC("A.B.C.D", "Source address");
			extNaclC.deny.igmp["A.B.C.D"].addSC("A.B.C.D", "Source wildcard bits");
				extNaclC.deny.igmp["A.B.C.D"]["A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.deny.igmp["A.B.C.D"]["A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.deny.igmp["A.B.C.D"]["A.B.C.D"].addSC("host", "A single destination host");
		extNaclC.deny.igmp.addSC("any", "Any source host");
			extNaclC.deny.igmp.any.addSC("A.B.C.D", "Destination address");
				extNaclC.deny.igmp.any["A.B.C.D"].addSC("A.B.C.D", "Destination wildcard bits");
			extNaclC.deny.igmp.any.addSC("any", "Any destination host");
			extNaclC.deny.igmp.any.addSC("host", "A single destination host");
				extNaclC.deny.igmp.any.host.addSC("Hostname or A.B.C.D", "Destination address");
		extNaclC.deny.igmp.addSC("host", "A single source host");
			extNaclC.deny.igmp.host.addSC("Hostname or A.B.C.D", "Source address");
				extNaclC.deny.igmp.host["Hostname or A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.deny.igmp.host["Hostname or A.B.C.D"].addSC("any", "Any destination host");
	extNaclC.deny.addSC("igrp", "Cisco's IGRP routing protocol");
		extNaclC.deny.igrp.addSC("A.B.C.D", "Source address");
			extNaclC.deny.igrp["A.B.C.D"].addSC("A.B.C.D", "Source wildcard bits");
				extNaclC.deny.igrp["A.B.C.D"]["A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.deny.igrp["A.B.C.D"]["A.B.C.D"].addSC("any", "Any destination host");
		extNaclC.deny.igrp.addSC("any", "Any source host");
			extNaclC.deny.igrp.any.addSC("A.B.C.D", "Destination address");
				extNaclC.deny.igrp.any["A.B.C.D"].addSC("A.B.C.D", "Destination wildcard bits");
			extNaclC.deny.igrp.any.addSC("any", "Any destination host");
			extNaclC.deny.igrp.any.addSC("host", "A single destination host");
				extNaclC.deny.igrp.any.host.addSC("Hostname or A.B.C.D", "Destination address");
		extNaclC.deny.igrp.addSC("host", "A single source host");
			extNaclC.deny.igrp.host.addSC("Hostname or A.B.C.D", "Source address");
				extNaclC.deny.igrp.host["Hostname or A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.deny.igrp.host["Hostname or A.B.C.D"].addSC("host", "A single destination host");
	extNaclC.deny.addSC("ip", "Any Internet Protocol");
		extNaclC.deny.ip.addSC("A.B.C.D", "Source address");
			extNaclC.deny.ip["A.B.C.D"].addSC("A.B.C.D", "Source wildcard bits");
				extNaclC.deny.ip["A.B.C.D"]["A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.deny.ip["A.B.C.D"]["A.B.C.D"].addSC("any", "Any destination host");
		extNaclC.deny.ip.addSC("any", "Any source host");
			extNaclC.deny.ip.any.addSC("A.B.C.D", "Destination address");
				extNaclC.deny.ip.any["A.B.C.D"].addSC("A.B.C.D", "Destination wildcard bits");
			extNaclC.deny.ip.any.addSC("any", "Any destination host");
				extNaclC.deny.ip.any.host.addSC("Hostname or A.B.C.D", "Destination address");
		extNaclC.deny.ip.addSC("host", "A single source host");
			extNaclC.deny.ip.host.addSC("Hostname or A.B.C.D", "Source address");
				extNaclC.deny.ip.host["Hostname or A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.deny.ip.host["Hostname or A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.deny.ip.host["Hostname or A.B.C.D"].addSC("host", "A single destination host");
	extNaclC.deny.addSC("ipinip", "IP in IP tunneling");
		extNaclC.deny.ipinip.addSC("A.B.C.D", "Source address");
			extNaclC.deny.ipinip["A.B.C.D"].addSC("A.B.C.D", "Source wildcard bits");
				extNaclC.deny.ipinip["A.B.C.D"]["A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.deny.ipinip["A.B.C.D"]["A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.deny.ipinip["A.B.C.D"]["A.B.C.D"].addSC("host", "A single destination host");
		extNaclC.deny.ipinip.addSC("any", "Any source host");
			extNaclC.deny.ipinip.any.addSC("A.B.C.D", "Destination address");
				extNaclC.deny.ipinip.any["A.B.C.D"].addSC("A.B.C.D", "Destination wildcard bits");
			extNaclC.deny.ipinip.any.addSC("any", "Any destination host");
			extNaclC.deny.ipinip.any.addSC("host", "A single destination host");
				extNaclC.deny.ipinip.any.host.addSC("Hostname or A.B.C.D", "Destination address");
		extNaclC.deny.ipinip.addSC("host", "A single source host");
			extNaclC.deny.ipinip.host.addSC("Hostname or A.B.C.D", "Source address");
				extNaclC.deny.ipinip.host["Hostname or A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.deny.ipinip.host["Hostname or A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.deny.ipinip.host["Hostname or A.B.C.D"].addSC("host", "A single destination host");
	extNaclC.deny.addSC("nos", "KA9Q NOS compatible IP over IP tunneling");
		extNaclC.deny.nos.addSC("A.B.C.D", "Source address");
			extNaclC.deny.nos["A.B.C.D"].addSC("A.B.C.D", "Source wildcard bits");
				extNaclC.deny.nos["A.B.C.D"]["A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.deny.nos["A.B.C.D"]["A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.deny.nos["A.B.C.D"]["A.B.C.D"].addSC("host", "A single destination host");
		extNaclC.deny.nos.addSC("any", "Any source host");
			extNaclC.deny.nos.any.addSC("A.B.C.D", "Destination address");
				extNaclC.deny.nos.any["A.B.C.D"].addSC("A.B.C.D", "Destination wildcard bits");
			extNaclC.deny.nos.any.addSC("any", "Any destination host");
			extNaclC.deny.nos.any.addSC("host", "A single destination host");
				extNaclC.deny.nos.any.host.addSC("Hostname or A.B.C.D", "Destination address");
		extNaclC.deny.nos.addSC("host", "A single source host");
			extNaclC.deny.nos.host.addSC("Hostname or A.B.C.D", "Source address");
				extNaclC.deny.nos.host["Hostname or A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.deny.nos.host["Hostname or A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.deny.nos.host["Hostname or A.B.C.D"].addSC("host", "A single destination host");
	extNaclC.deny.addSC("ospf", "OSPF routing protocol");
		extNaclC.deny.ospf.addSC("A.B.C.D", "Source address");
			extNaclC.deny.ospf["A.B.C.D"].addSC("A.B.C.D", "Source wildcard bits");
				extNaclC.deny.ospf["A.B.C.D"]["A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.deny.ospf["A.B.C.D"]["A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.deny.ospf["A.B.C.D"]["A.B.C.D"].addSC("host", "A single destination host");
		extNaclC.deny.ospf.addSC("any", "Any source host");
			extNaclC.deny.ospf.any.addSC("A.B.C.D", "Destination address");
				extNaclC.deny.ospf.any["A.B.C.D"].addSC("A.B.C.D", "Destination wildcard bits");
			extNaclC.deny.ospf.any.addSC("any", "Any destination host");
			extNaclC.deny.ospf.any.addSC("host", "A single destination host");
				extNaclC.deny.ospf.any.host.addSC("Hostname or A.B.C.D", "Destination address");
		extNaclC.deny.ospf.addSC("host", "A single source host");
			extNaclC.deny.ospf.host.addSC("Hostname or A.B.C.D", "Source address");
				extNaclC.deny.ospf.host["Hostname or A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.deny.ospf.host["Hostname or A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.deny.ospf.host["Hostname or A.B.C.D"].addSC("host", "A single destination host");
	extNaclC.deny.addSC("pcp", "Payload Compression Protocol");
		extNaclC.deny.pcp.addSC("A.B.C.D", "Source address");
			extNaclC.deny.pcp["A.B.C.D"].addSC("A.B.C.D", "Source wildcard bits");
				extNaclC.deny.pcp["A.B.C.D"]["A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.deny.pcp["A.B.C.D"]["A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.deny.pcp["A.B.C.D"]["A.B.C.D"].addSC("host", "A single destination host");
		extNaclC.deny.pcp.addSC("any", "Any source host");
			extNaclC.deny.pcp.any.addSC("A.B.C.D", "Destination address");
				extNaclC.deny.pcp.any["A.B.C.D"].addSC("A.B.C.D", "Destination wildcard bits");
			extNaclC.deny.pcp.any.addSC("any", "Any destination host");
			extNaclC.deny.pcp.any.addSC("host", "A single destination host");
				extNaclC.deny.pcp.any.host.addSC("Hostname or A.B.C.D", "Destination address");
		extNaclC.deny.pcp.addSC("host", "A single source host");
			extNaclC.deny.pcp.host.addSC("Hostname or A.B.C.D", "Source address");
				extNaclC.deny.pcp.host["Hostname or A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.deny.pcp.host["Hostname or A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.deny.pcp.host["Hostname or A.B.C.D"].addSC("host", "A single destination host");
	extNaclC.deny.addSC("pim", "Protocol Independent Multicast");
		extNaclC.deny.pim.addSC("A.B.C.D", "Source address");
			extNaclC.deny.pim["A.B.C.D"].addSC("A.B.C.D", "Source wildcard bits");
				extNaclC.deny.pim["A.B.C.D"]["A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.deny.pim["A.B.C.D"]["A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.deny.pim["A.B.C.D"]["A.B.C.D"].addSC("host", "A single destination host");
		extNaclC.deny.pim.addSC("any", "Any source host");
			extNaclC.deny.pim.any.addSC("A.B.C.D", "Destination address");
				extNaclC.deny.pim.any["A.B.C.D"].addSC("A.B.C.D", "Destination wildcard bits");
			extNaclC.deny.pim.any.addSC("any", "Any destination host");
			extNaclC.deny.pim.any.addSC("host", "A single destination host");
				extNaclC.deny.pim.any.host.addSC("Hostname or A.B.C.D", "Destination address");
		extNaclC.deny.pim.addSC("host", "A single source host");
			extNaclC.deny.pim.host.addSC("Hostname or A.B.C.D", "Source address");
				extNaclC.deny.pim.host["Hostname or A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.deny.pim.host["Hostname or A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.deny.pim.host["Hostname or A.B.C.D"].addSC("host", "A single destination host");
	extNaclC.deny.addSC("tcp", "Transmission Control Protocol");
		extNaclC.deny.tcp.addSC("A.B.C.D", "Source address");
			extNaclC.deny.tcp["A.B.C.D"].addSC("A.B.C.D", "Source wildcard bits");
				extNaclC.deny.tcp["A.B.C.D"]["A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.deny.tcp["A.B.C.D"]["A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.deny.tcp["A.B.C.D"]["A.B.C.D"].addSC("eq", "Match only packets on a given port number");
		extNaclC.deny.tcp.addSC("any", "Any source host");
			extNaclC.deny.tcp.any.addSC("A.B.C.D", "Destination address");
				extNaclC.deny.tcp.any["A.B.C.D"].addSC("A.B.C.D", "Destination wildcard bits");
			extNaclC.deny.tcp.any.addSC("any", "Any destination host");
			extNaclC.deny.tcp.any.addSC("eq", "Match only packets on a given port number");
				extNaclC.deny.tcp.any["eq"].addSC("<0-65535>", "Port number");
				extNaclC.deny.tcp.any["eq"].addSC("www", "World Wide Web (HTTP, 80)");
			extNaclC.deny.tcp.any.addSC("gt", "Match only packets with a greater port number");
				extNaclC.deny.tcp.any["gt"].addSC("time", "Time (37)");
				extNaclC.deny.tcp.any["gt"].addSC("whois", "Nicname (43)");
				extNaclC.deny.tcp.any["gt"].addSC("www", "World Wide Web (HTTP, 80)");
			extNaclC.deny.tcp.any.addSC("host", "A single destination host");
				extNaclC.deny.tcp.any.host.addSC("Hostname or A.B.C.D", "Destination address");
			extNaclC.deny.tcp.any.addSC("lt", "Match only packets with a lower port number");
				extNaclC.deny.tcp.any["lt"].addSC("whois", "Nicname (43)");
				extNaclC.deny.tcp.any["lt"].addSC("www", "World Wide Web (HTTP, 80)");
			extNaclC.deny.tcp.any.addSC("neq", "Match only packets not on a given port number");
				extNaclC.deny.tcp.any.neq.addSC("<0-65535>", "Port number");
				extNaclC.deny.tcp.any.neq.addSC("exec", "Exec (rsh, 512)");
				extNaclC.deny.tcp.any.neq.addSC("finger", "Finger (79)");
			extNaclC.deny.tcp.any.addSC("range", "Match only packets in the range of port numbers");
				extNaclC.deny.tcp.any.range.addSC("<0-65535>", "Port number");
				extNaclC.deny.tcp.any.range.addSC("bgp", "Border Gateway Protocol (179)");
				extNaclC.deny.tcp.any.range.addSC("www", "World Wide Web (HTTP, 80)");
		extNaclC.deny.tcp.addSC("host", "A single source host");
			extNaclC.deny.tcp.host.addSC("Hostname or A.B.C.D", "Source address");
				extNaclC.deny.tcp.host["Hostname or A.B.C.D"].addSC("host", "A single destination host");
	extNaclC.deny.addSC("udp", "User Datagram Protocol");
		extNaclC.deny.udp.addSC("A.B.C.D", "Source address");
			extNaclC.deny.udp["A.B.C.D"].addSC("A.B.C.D", "Source wildcard bits");
				extNaclC.deny.udp["A.B.C.D"]["A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.deny.udp["A.B.C.D"]["A.B.C.D"].addSC("neq", "Match only packets not on a given port number");
				extNaclC.deny.udp["A.B.C.D"]["A.B.C.D"].addSC("range", "Match only packets in the range of port numbers");
		extNaclC.deny.udp.addSC("any", "Any source host");
			extNaclC.deny.udp.any.addSC("A.B.C.D", "Destination address");
				extNaclC.deny.udp.any["A.B.C.D"].addSC("A.B.C.D", "Destination wildcard bits");
			extNaclC.deny.udp.any.addSC("any", "Any destination host");
				extNaclC.deny.udp.any.any.addSC("log", "Log matches against this entry");
				extNaclC.deny.udp.any.any.addSC("time-range", "Specify a time-range");
				extNaclC.deny.udp.any.any.addSC("tos", "Match packets with given TOS value");
			extNaclC.deny.udp.any.addSC("eq", "Match only packets on a given port number");
				extNaclC.deny.udp.any["eq"].addSC("domain", "Domain Name Service (DNS, 53)");
				extNaclC.deny.udp.any["eq"].addSC("time", "Time (37)");
				extNaclC.deny.udp.any["eq"].addSC("who", "Who service (rwho, 513)");
			extNaclC.deny.udp.any.addSC("gt", "Match only packets with a greater port number");
				extNaclC.deny.udp.any["gt"].addSC("tftp", "Trivial File Transfer Protocol (69)");

				extNaclC.deny.udp.any["gt"].addSC("who", "Who service (rwho, 513)");
			extNaclC.deny.udp.any.addSC("host", "A single destination host");
				extNaclC.deny.udp.any.host.addSC("Hostname or A.B.C.D", "Destination address");
			extNaclC.deny.udp.any.addSC("lt", "Match only packets with a lower port number");
				extNaclC.deny.udp.any["lt"].addSC("<0-65535>", "Port number");
				extNaclC.deny.udp.any["lt"].addSC("biff", "Biff (mail notification, comsat, 512)");
			extNaclC.deny.udp.any.addSC("neq", "Match only packets not on a given port number");
				extNaclC.deny.udp.any.neq.addSC("<0-65535>", "Port number");
				extNaclC.deny.udp.any.neq.addSC("time", "Time (37)");
				extNaclC.deny.udp.any.neq.addSC("who", "Who service (rwho, 513)");
			extNaclC.deny.udp.any.addSC("range", "Match only packets in the range of port numbers");
				extNaclC.deny.udp.any.range.addSC("<0-65535>", "Port number");
				extNaclC.deny.udp.any.range.addSC("biff", "Biff (mail notification, comsat, 512)");
				extNaclC.deny.udp.any.range.addSC("time", "Time (37)");
				extNaclC.deny.udp.any.range.addSC("who", "Who service (rwho, 513)");
		extNaclC.deny.udp.addSC("host", "A single source host");
			extNaclC.deny.udp.host.addSC("Hostname or A.B.C.D", "Source address");
				extNaclC.deny.udp.host["Hostname or A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.deny.udp.host["Hostname or A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.deny.udp.host["Hostname or A.B.C.D"].addSC("range", "Match only packets in the range of port numbers");
extNaclC.addSC("dynamic", "Specify a DYNAMIC list of PERMITs or DENYs");
extNaclC.addSC("evaluate", "Evaluate an access list");
	extNaclC.evaluate.addSC("WORD", "IP reflexive access list name");
extNaclC.addSC("exit", "Exit from access-list configuration mode");
extNaclC.addSC("no", "Negate a command or set its defaults");
	extNaclC.no.addSC("deny", "Specify packets to reject");
		extNaclC.no.deny.addSC("<0-255>", "An IP protocol number");
			extNaclC.no.deny["<0-255>"].addSC("A.B.C.D", "Source address");
				extNaclC.no.deny["<0-255>"]["A.B.C.D"].addSC("A.B.C.D", "Source wildcard bits");
			extNaclC.no.deny["<0-255>"].addSC("any", "Any source host");
				extNaclC.no.deny["<0-255>"].any.addSC("A.B.C.D", "Destination address");
				extNaclC.no.deny["<0-255>"].any.addSC("any", "Any destination host");
				extNaclC.no.deny["<0-255>"].any.addSC("host", "A single destination host");
			extNaclC.no.deny["<0-255>"].addSC("host", "A single source host");
		extNaclC.no.deny.addSC("tcp", "Transmission Control Protocol");
		extNaclC.no.deny.addSC("udp", "User Datagram Protocol");
	extNaclC.no.addSC("dynamic", "Specify a DYNAMIC list of PERMITs or DENYs");
	extNaclC.no.addSC("evaluate", "Evaluate an access list");
		extNaclC.no.evaluate.addSC("WORD", "IP reflexive access list name");
extNaclC.addSC("permit", "Specify packets to forward");
	extNaclC.permit.addSC("<0-255>", "An IP protocol number");
		extNaclC.permit["<0-255>"].addSC("A.B.C.D", "Source address");
			extNaclC.permit["<0-255>"]["A.B.C.D"].addSC("A.B.C.D", "Source wildcard bits");
				extNaclC.permit["<0-255>"]["A.B.C.D"]["A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.permit["<0-255>"]["A.B.C.D"]["A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.permit["<0-255>"]["A.B.C.D"]["A.B.C.D"].addSC("host", "A single destination host");
		extNaclC.permit["<0-255>"].addSC("any", "Any source host");
			extNaclC.permit["<0-255>"].any.addSC("A.B.C.D", "Destination address");
				extNaclC.permit["<0-255>"].any["A.B.C.D"].addSC("A.B.C.D", "Destination wildcard bits");
			extNaclC.permit["<0-255>"].any.addSC("any", "Any destination host");
			extNaclC.permit["<0-255>"].any.addSC("host", "A single destination host");
				extNaclC.permit["<0-255>"].any.host.addSC("Hostname or A.B.C.D", "Destination address");
		extNaclC.permit["<0-255>"].addSC("host", "A single source host");
			extNaclC.permit["<0-255>"].host.addSC("Hostname or A.B.C.D", "Source address");
				extNaclC.permit["<0-255>"].host["Hostname or A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.permit["<0-255>"].host["Hostname or A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.permit["<0-255>"].host["Hostname or A.B.C.D"].addSC("host", "A single destination host");
	extNaclC.permit.addSC("ahp", "Authentication Header Protocol");
		extNaclC.permit.ahp.addSC("A.B.C.D", "Source address");
			extNaclC.permit.ahp["A.B.C.D"].addSC("A.B.C.D", "Source wildcard bits");
				extNaclC.permit.ahp["A.B.C.D"]["A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.permit.ahp["A.B.C.D"]["A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.permit.ahp["A.B.C.D"]["A.B.C.D"].addSC("host", "A single destination host");
		extNaclC.permit.ahp.addSC("any", "Any source host");
			extNaclC.permit.ahp.any.addSC("A.B.C.D", "Destination address");
				extNaclC.permit.ahp.any["A.B.C.D"].addSC("A.B.C.D", "Destination wildcard bits");
			extNaclC.permit.ahp.any.addSC("any", "Any destination host");
			extNaclC.permit.ahp.any.addSC("host", "A single destination host");
				extNaclC.permit.ahp.any.host.addSC("Hostname or A.B.C.D", "Destination address");
		extNaclC.permit.ahp.addSC("host", "A single source host");
			extNaclC.permit.ahp.host.addSC("Hostname or A.B.C.D", "Source address");
				extNaclC.permit.ahp.host["Hostname or A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.permit.ahp.host["Hostname or A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.permit.ahp.host["Hostname or A.B.C.D"].addSC("host", "A single destination host");
	extNaclC.permit.addSC("eigrp", "Cisco's EIGRP routing protocol");
	extNaclC.permit.addSC("esp", "Encapsulation Security Payload");
	extNaclC.permit.addSC("gre", "Cisco's GRE tunneling");
	extNaclC.permit.addSC("icmp", "Internet Control Message Protocol");
		extNaclC.permit.icmp.addSC("A.B.C.D", "Source address");
			extNaclC.permit.icmp["A.B.C.D"].addSC("A.B.C.D", "Source wildcard bits");
				extNaclC.permit.icmp["A.B.C.D"]["A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.permit.icmp["A.B.C.D"]["A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.permit.icmp["A.B.C.D"]["A.B.C.D"].addSC("host", "A single destination host");
		extNaclC.permit.icmp.addSC("any", "Any source host");
			extNaclC.permit.icmp.any.addSC("A.B.C.D", "Destination address");
				extNaclC.permit.icmp.any["A.B.C.D"].addSC("A.B.C.D", "Destination wildcard bits");
			extNaclC.permit.icmp.any.addSC("any", "Any destination host");
				extNaclC.permit.icmp.any.any.addSC("<0-255>", "ICMP message type");
				extNaclC.permit.icmp.any.any.addSC("echo", "Echo (ping)");
			extNaclC.permit.icmp.any.addSC("host", "A single destination host");
				extNaclC.permit.icmp.any.host.addSC("Hostname or A.B.C.D", "Destination address");
		extNaclC.permit.icmp.addSC("host", "A single source host");
			extNaclC.permit.icmp.host.addSC("Hostname or A.B.C.D", "Source address");
				extNaclC.permit.icmp.host["Hostname or A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.permit.icmp.host["Hostname or A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.permit.icmp.host["Hostname or A.B.C.D"].addSC("host", "A single destination host");
	extNaclC.permit.addSC("igmp", "Internet Gateway Message Protocol");
		extNaclC.permit.igmp.addSC("A.B.C.D", "Source address");
			extNaclC.permit.igmp["A.B.C.D"].addSC("A.B.C.D", "Source wildcard bits");
				extNaclC.permit.igmp["A.B.C.D"]["A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.permit.igmp["A.B.C.D"]["A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.permit.igmp["A.B.C.D"]["A.B.C.D"].addSC("host", "A single destination host");
		extNaclC.permit.igmp.addSC("any", "Any source host");
			extNaclC.permit.igmp.any.addSC("A.B.C.D", "Destination address");
				extNaclC.permit.igmp.any["A.B.C.D"].addSC("A.B.C.D", "Destination wildcard bits");
			extNaclC.permit.igmp.any.addSC("any", "Any destination host");
				extNaclC.permit.igmp.any.any.addSC("<0-15>", "IGMP message type");
				extNaclC.permit.igmp.any.any.addSC("trace", "Multicast trace");
			extNaclC.permit.igmp.any.addSC("host", "A single destination host");
				extNaclC.permit.igmp.any.host.addSC("Hostname or A.B.C.D", "Destination address");
		extNaclC.permit.igmp.addSC("host", "A single source host");
			extNaclC.permit.igmp.host.addSC("Hostname or A.B.C.D", "Source address");
				extNaclC.permit.igmp.host["Hostname or A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.permit.igmp.host["Hostname or A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.permit.igmp.host["Hostname or A.B.C.D"].addSC("host", "A single destination host");
	extNaclC.permit.addSC("igrp", "Cisco's IGRP routing protocol");
		extNaclC.permit.igrp.addSC("A.B.C.D", "Source address");
			extNaclC.permit.igrp["A.B.C.D"].addSC("A.B.C.D", "Source wildcard bits");
				extNaclC.permit.igrp["A.B.C.D"]["A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.permit.igrp["A.B.C.D"]["A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.permit.igrp["A.B.C.D"]["A.B.C.D"].addSC("host", "A single destination host");
		extNaclC.permit.igrp.addSC("any", "Any source host");
			extNaclC.permit.igrp.any.addSC("A.B.C.D", "Destination address");
				extNaclC.permit.igrp.any["A.B.C.D"].addSC("A.B.C.D", "Destination wildcard bits");
			extNaclC.permit.igrp.any.addSC("any", "Any destination host");
			extNaclC.permit.igrp.any.addSC("host", "A single destination host");
				extNaclC.permit.igrp.any.host.addSC("Hostname or A.B.C.D", "Destination address");
		extNaclC.permit.igrp.addSC("host", "A single source host");
			extNaclC.permit.igrp.host.addSC("Hostname or A.B.C.D", "Source address");
				extNaclC.permit.igrp.host["Hostname or A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.permit.igrp.host["Hostname or A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.permit.igrp.host["Hostname or A.B.C.D"].addSC("host", "A single destination host");
	extNaclC.permit.addSC("ip", "Any Internet Protocol");
		extNaclC.permit.ip.addSC("A.B.C.D", "Source address");
			extNaclC.permit.ip["A.B.C.D"].addSC("A.B.C.D", "Source wildcard bits");
				extNaclC.permit.ip["A.B.C.D"]["A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.permit.ip["A.B.C.D"]["A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.permit.ip["A.B.C.D"]["A.B.C.D"].addSC("host", "A single destination host");
		extNaclC.permit.ip.addSC("any", "Any source host");
			extNaclC.permit.ip.any.addSC("A.B.C.D", "Destination address");
				extNaclC.permit.ip.any["A.B.C.D"].addSC("A.B.C.D", "Destination wildcard bits");
			extNaclC.permit.ip.any.addSC("any", "Any destination host");
			extNaclC.permit.ip.any.addSC("host", "A single destination host");
				extNaclC.permit.ip.any.host.addSC("Hostname or A.B.C.D", "Destination address");
		extNaclC.permit.ip.addSC("host", "A single source host");
			extNaclC.permit.ip.host.addSC("Hostname or A.B.C.D", "Source address");
				extNaclC.permit.ip.host["Hostname or A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.permit.ip.host["Hostname or A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.permit.ip.host["Hostname or A.B.C.D"].addSC("host", "A single destination host");
	extNaclC.permit.addSC("ipinip", "IP in IP tunneling");
		extNaclC.permit.ipinip.addSC("A.B.C.D", "Source address");
			extNaclC.permit.ipinip["A.B.C.D"].addSC("A.B.C.D", "Source wildcard bits");
				extNaclC.permit.ipinip["A.B.C.D"]["A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.permit.ipinip["A.B.C.D"]["A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.permit.ipinip["A.B.C.D"]["A.B.C.D"].addSC("host", "A single destination host");
		extNaclC.permit.ipinip.addSC("any", "Any source host");
			extNaclC.permit.ipinip.any.addSC("A.B.C.D", "Destination address");
				extNaclC.permit.ipinip.any["A.B.C.D"].addSC("A.B.C.D", "Destination wildcard bits");
			extNaclC.permit.ipinip.any.addSC("any", "Any destination host");
			extNaclC.permit.ipinip.any.addSC("host", "A single destination host");
				extNaclC.permit.ipinip.any.host.addSC("Hostname or A.B.C.D", "Destination address");
		extNaclC.permit.ipinip.addSC("host", "A single source host");
			extNaclC.permit.ipinip.host.addSC("Hostname or A.B.C.D", "Source address");
				extNaclC.permit.ipinip.host["Hostname or A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.permit.ipinip.host["Hostname or A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.permit.ipinip.host["Hostname or A.B.C.D"].addSC("host", "A single destination host");
	extNaclC.permit.addSC("nos", "KA9Q NOS compatible IP over IP tunneling");
		extNaclC.permit.nos.addSC("A.B.C.D", "Source address");
			extNaclC.permit.nos["A.B.C.D"].addSC("A.B.C.D", "Source wildcard bits");
				extNaclC.permit.nos["A.B.C.D"]["A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.permit.nos["A.B.C.D"]["A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.permit.nos["A.B.C.D"]["A.B.C.D"].addSC("host", "A single destination host");
		extNaclC.permit.nos.addSC("any", "Any source host");
			extNaclC.permit.nos.any.addSC("A.B.C.D", "Destination address");
				extNaclC.permit.nos.any["A.B.C.D"].addSC("A.B.C.D", "Destination wildcard bits");
			extNaclC.permit.nos.any.addSC("any", "Any destination host");
			extNaclC.permit.nos.any.addSC("host", "A single destination host");
				extNaclC.permit.nos.any.host.addSC("Hostname or A.B.C.D", "Destination address");
		extNaclC.permit.nos.addSC("host", "A single source host");
			extNaclC.permit.nos.host.addSC("Hostname or A.B.C.D", "Source address");
				extNaclC.permit.nos.host["Hostname or A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.permit.nos.host["Hostname or A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.permit.nos.host["Hostname or A.B.C.D"].addSC("host", "A single destination host");
	extNaclC.permit.addSC("ospf", "OSPF routing protocol");
		extNaclC.permit.ospf.addSC("A.B.C.D", "Source address");
			extNaclC.permit.ospf["A.B.C.D"].addSC("A.B.C.D", "Source wildcard bits");
				extNaclC.permit.ospf["A.B.C.D"]["A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.permit.ospf["A.B.C.D"]["A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.permit.ospf["A.B.C.D"]["A.B.C.D"].addSC("host", "A single destination host");
		extNaclC.permit.ospf.addSC("any", "Any source host");
			extNaclC.permit.ospf.any.addSC("A.B.C.D", "Destination address");
				extNaclC.permit.ospf.any["A.B.C.D"].addSC("A.B.C.D", "Destination wildcard bits");
			extNaclC.permit.ospf.any.addSC("any", "Any destination host");
			extNaclC.permit.ospf.any.addSC("host", "A single destination host");
				extNaclC.permit.ospf.any.host.addSC("Hostname or A.B.C.D", "Destination address");
		extNaclC.permit.ospf.addSC("host", "A single source host");
			extNaclC.permit.ospf.host.addSC("Hostname or A.B.C.D", "Source address");
				extNaclC.permit.ospf.host["Hostname or A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.permit.ospf.host["Hostname or A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.permit.ospf.host["Hostname or A.B.C.D"].addSC("host", "A single destination host");
	extNaclC.permit.addSC("pcp", "Payload Compression Protocol");
		extNaclC.permit.pcp.addSC("A.B.C.D", "Source address");
			extNaclC.permit.pcp["A.B.C.D"].addSC("A.B.C.D", "Source wildcard bits");
				extNaclC.permit.pcp["A.B.C.D"]["A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.permit.pcp["A.B.C.D"]["A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.permit.pcp["A.B.C.D"]["A.B.C.D"].addSC("host", "A single destination host");
		extNaclC.permit.pcp.addSC("any", "Any source host");
			extNaclC.permit.pcp.any.addSC("A.B.C.D", "Destination address");
				extNaclC.permit.pcp.any["A.B.C.D"].addSC("A.B.C.D", "Destination wildcard bits");
			extNaclC.permit.pcp.any.addSC("any", "Any destination host");
			extNaclC.permit.pcp.any.addSC("host", "A single destination host");
				extNaclC.permit.pcp.any.host.addSC("Hostname or A.B.C.D", "Destination address");
		extNaclC.permit.pcp.addSC("host", "A single source host");
			extNaclC.permit.pcp.host.addSC("Hostname or A.B.C.D", "Source address");
				extNaclC.permit.pcp.host["Hostname or A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.permit.pcp.host["Hostname or A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.permit.pcp.host["Hostname or A.B.C.D"].addSC("host", "A single destination host");
	extNaclC.permit.addSC("pim", "Protocol Independent Multicast");
		extNaclC.permit.pim.addSC("A.B.C.D", "Source address");
			extNaclC.permit.pim["A.B.C.D"].addSC("A.B.C.D", "Source wildcard bits");
				extNaclC.permit.pim["A.B.C.D"]["A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.permit.pim["A.B.C.D"]["A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.permit.pim["A.B.C.D"]["A.B.C.D"].addSC("host", "A single destination host");
		extNaclC.permit.pim.addSC("any", "Any source host");
			extNaclC.permit.pim.any.addSC("A.B.C.D", "Destination address");
				extNaclC.permit.pim.any["A.B.C.D"].addSC("A.B.C.D", "Destination wildcard bits");
			extNaclC.permit.pim.any.addSC("any", "Any destination host");
			extNaclC.permit.pim.any.addSC("host", "A single destination host");
				extNaclC.permit.pim.any.host.addSC("Hostname or A.B.C.D", "Destination address");
		extNaclC.permit.pim.addSC("host", "A single source host");
			extNaclC.permit.pim.host.addSC("Hostname or A.B.C.D", "Source address");
				extNaclC.permit.pim.host["Hostname or A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.permit.pim.host["Hostname or A.B.C.D"].addSC("any", "Any destination host");
				extNaclC.permit.pim.host["Hostname or A.B.C.D"].addSC("host", "A single destination host");
	extNaclC.permit.addSC("tcp", "Transmission Control Protocol");
		extNaclC.permit.tcp.addSC("A.B.C.D", "Source address");
			extNaclC.permit.tcp["A.B.C.D"].addSC("A.B.C.D", "Source wildcard bits");
				extNaclC.permit.tcp["A.B.C.D"]["A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.permit.tcp["A.B.C.D"]["A.B.C.D"].addSC("lt", "Match only packets with a lower port number");
				extNaclC.permit.tcp["A.B.C.D"]["A.B.C.D"].addSC("range", "Match only packets in the range of port numbers");
		extNaclC.permit.tcp.addSC("any", "Any source host");
			extNaclC.permit.tcp.any.addSC("A.B.C.D", "Destination address");
				extNaclC.permit.tcp.any["A.B.C.D"].addSC("A.B.C.D", "Destination wildcard bits");
			extNaclC.permit.tcp.any.addSC("any", "Any destination host");
				extNaclC.permit.tcp.any.any.addSC("ack", "Match on the ACK bit");
				extNaclC.permit.tcp.any.any.addSC("established", "Match established connections");
			extNaclC.permit.tcp.any.addSC("eq", "Match only packets on a given port number");
				extNaclC.permit.tcp.any["eq"].addSC("<0-65535>", "Port number");
				extNaclC.permit.tcp.any["eq"].addSC("bgp", "Border Gateway Protocol (179)");
				extNaclC.permit.tcp.any["eq"].addSC("login", "Login (rlogin, 513)");
				extNaclC.permit.tcp.any["eq"].addSC("lpd", "Printer service (515)");
			extNaclC.permit.tcp.any.addSC("gt", "Match only packets with a greater port number");
				extNaclC.permit.tcp.any["gt"].addSC("<0-65535>", "Port number");
				extNaclC.permit.tcp.any["gt"].addSC("bgp", "Border Gateway Protocol (179)");
				extNaclC.permit.tcp.any["gt"].addSC("chargen", "Character generator (19)");
				extNaclC.permit.tcp.any["gt"].addSC("discard", "Discard (9)");
				extNaclC.permit.tcp.any["gt"].addSC("www", "World Wide Web (HTTP, 80)");
			extNaclC.permit.tcp.any.addSC("host", "A single destination host");
				extNaclC.permit.tcp.any.host.addSC("Hostname or A.B.C.D", "Destination address");
			extNaclC.permit.tcp.any.addSC("lt", "Match only packets with a lower port number");
				extNaclC.permit.tcp.any["lt"].addSC("<0-65535>", "Port number");
				extNaclC.permit.tcp.any["lt"].addSC("bgp", "Border Gateway Protocol (179)");
				extNaclC.permit.tcp.any["lt"].addSC("smtp", "Simple Mail Transport Protocol (25)");
				extNaclC.permit.tcp.any["lt"].addSC("time", "Time (37)");
				extNaclC.permit.tcp.any["lt"].addSC("whois", "Nicname (43)");
				extNaclC.permit.tcp.any["lt"].addSC("www", "World Wide Web (HTTP, 80)");
			extNaclC.permit.tcp.any.addSC("neq", "Match only packets not on a given port number");
				extNaclC.permit.tcp.any.neq.addSC("<0-65535>", "Port number");
				extNaclC.permit.tcp.any.neq.addSC("www", "World Wide Web (HTTP, 80)");
			extNaclC.permit.tcp.any.addSC("range", "Match only packets in the range of port numbers");
				extNaclC.permit.tcp.any.range.addSC("<0-65535>", "Port number");
				extNaclC.permit.tcp.any.range.addSC("bgp", "Border Gateway Protocol (179)");
		extNaclC.permit.tcp.addSC("host", "A single source host");
			extNaclC.permit.tcp.host.addSC("Hostname or A.B.C.D", "Source address");
				extNaclC.permit.tcp.host["Hostname or A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.permit.tcp.host["Hostname or A.B.C.D"].addSC("range", "Match only packets in the range of port numbers");
	extNaclC.permit.addSC("udp", "User Datagram Protocol");
		extNaclC.permit.udp.addSC("A.B.C.D", "Source address");
			extNaclC.permit.udp["A.B.C.D"].addSC("A.B.C.D", "Source wildcard bits");
				extNaclC.permit.udp["A.B.C.D"]["A.B.C.D"].addSC("A.B.C.D", "Destination address");
				extNaclC.permit.udp["A.B.C.D"]["A.B.C.D"].addSC("any", "Any destination host");
		extNaclC.permit.udp.addSC("any", "Any source host");
			extNaclC.permit.udp.any.addSC("A.B.C.D", "Destination address");
				extNaclC.permit.udp.any["A.B.C.D"].addSC("A.B.C.D", "Destination wildcard bits");
			extNaclC.permit.udp.any.addSC("any", "Any destination host");
			extNaclC.permit.udp.any.addSC("eq", "Match only packets on a given port number");
				extNaclC.permit.udp.any["eq"].addSC("<0-65535>", "Port number");
				extNaclC.permit.udp.any["eq"].addSC("biff", "Biff (mail notification, comsat, 512)");
				extNaclC.permit.udp.any["eq"].addSC("who", "Who service (rwho, 513)");
			extNaclC.permit.udp.any.addSC("gt", "Match only packets with a greater port number");
				extNaclC.permit.udp.any["gt"].addSC("<0-65535>", "Port number");
				extNaclC.permit.udp.any["gt"].addSC("who", "Who service (rwho, 513)");
			extNaclC.permit.udp.any.addSC("host", "A single destination host");
				extNaclC.permit.udp.any.host.addSC("Hostname or A.B.C.D", "Destination address");
			extNaclC.permit.udp.any.addSC("lt", "Match only packets with a lower port number");
				extNaclC.permit.udp.any["lt"].addSC("<0-65535>", "Port number");
				extNaclC.permit.udp.any["lt"].addSC("echo", "Echo (7)");
			extNaclC.permit.udp.any.addSC("neq", "Match only packets not on a given port number");
				extNaclC.permit.udp.any.neq.addSC("<0-65535>", "Port number");
				extNaclC.permit.udp.any.neq.addSC("who", "Who service (rwho, 513)");
			extNaclC.permit.udp.any.addSC("range", "Match only packets in the range of port numbers");
				extNaclC.permit.udp.any.range.addSC("<0-65535>", "Port number");
				extNaclC.permit.udp.any.range.addSC("talk", "Talk (517)");
		extNaclC.permit.udp.addSC("host", "A single source host");
			extNaclC.permit.udp.host.addSC("Hostname or A.B.C.D", "Source address");
				extNaclC.permit.udp.host["Hostname or A.B.C.D"].addSC("A.B.C.D", "Destination address");
extNaclC.addSC("remark", "Access list entry comment");
