joyent-portal/packages/my-joy-beta/src/graphql/list-firewall-rules.gql

query Instance($name: String!) {
  machines(name: $name) {
    id
    name
    firewallEnabled
    firewallRules {
      id
      enabled
      global
      description
      rule
    }
  }
}