1*bc4097aaSchristos# $NetBSD: example.12,v 1.1.1.1 2012/03/23 21:20:15 christos Exp $ 2*bc4097aaSchristos# 3*bc4097aaSchristos# get rid of all short IP fragments (too small for valid comparison) 4*bc4097aaSchristos# 5*bc4097aaSchristosblock in proto tcp all with short 6*bc4097aaSchristos# 7*bc4097aaSchristos# drop and log any IP packets with options set in them. 8*bc4097aaSchristos# 9*bc4097aaSchristosblock in log all with ipopts 10*bc4097aaSchristos# 11*bc4097aaSchristos# log packets with BOTH ssrr and lsrr set 12*bc4097aaSchristos# 13*bc4097aaSchristoslog in all with opt lsrr,ssrr 14*bc4097aaSchristos# 15*bc4097aaSchristos# drop any source routing options 16*bc4097aaSchristos# 17*bc4097aaSchristosblock in quick all with opt lsrr 18*bc4097aaSchristosblock in quick all with opt ssrr 19