you can't. Astaro packet filter objects are stored in a xml file. Middleware picks all needed information and assembles iptables packet filters. You could add own filters putting them into a file called ipnat.local, just search the board. Personally I wouldn't do this since on one hand you may loose product warranty and on the other hand your rules wouldn't be managable via WebAdmin.