set policy id 94 from "Untrust" to "DMZ"  "Any" "Any" "ANY" permit log
set policy id 94 disable
set policy id 94
exit
set policy id 95 from "DMZ" to "Untrust"  "Any" "Any" "ANY" nat src permit log
set policy id 95
exit
set policy id 96 from "Trust" to "DMZ"  "Any" "Any" "ANY" permit
set policy id 96
exit
set policy id 97 from "DMZ" to "Trust"  "Any" "Any" "ANY" permit log
set policy id 97
exit
		

未设置nat src,DMZ 将不能访问外网