xref: /netbsd-src/external/bsd/ipf/dist/rules/example.12 (revision bc4097aacfdd9307c19b7947c13c6ad6982527a9)
1*bc4097aaSchristos#	$NetBSD: example.12,v 1.1.1.1 2012/03/23 21:20:15 christos Exp $
2*bc4097aaSchristos#
3*bc4097aaSchristos# get rid of all short IP fragments (too small for valid comparison)
4*bc4097aaSchristos#
5*bc4097aaSchristosblock in proto tcp all with short
6*bc4097aaSchristos#
7*bc4097aaSchristos# drop and log any IP packets with options set in them.
8*bc4097aaSchristos#
9*bc4097aaSchristosblock in log all with ipopts
10*bc4097aaSchristos#
11*bc4097aaSchristos# log packets with BOTH ssrr and lsrr set
12*bc4097aaSchristos#
13*bc4097aaSchristoslog in all with opt lsrr,ssrr
14*bc4097aaSchristos#
15*bc4097aaSchristos# drop any source routing options
16*bc4097aaSchristos#
17*bc4097aaSchristosblock in quick all with opt lsrr
18*bc4097aaSchristosblock in quick all with opt ssrr
19