New-NetFirewallRule -Name 'PodoAI-SSH-Tailnet' -DisplayName 'PodoAI SSH tailnet only' -Direction Inbound -Protocol TCP -LocalPort 22 -RemoteAddress 100.64.0.0/10 -Action Allow -Profile Any -EA SilentlyContinue
New-NetFirewallRule -Name 'PodoAI-ICMP-Tailnet' -DisplayName 'PodoAI ping tailnet only' -Direction Inbound -Protocol ICMPv4 -IcmpType 8 -RemoteAddress 100.64.0.0/10 -Action Allow -Profile Any -EA SilentlyContinue
Get-NetFirewallRule -Name 'PodoAI-*' | ft Name,Enabled,Action -AutoSize