1*22ab6602Schristospass in inet from 127.0.0.1/32 to 127.0.0.1/32 with short,frag 2b9daf172Sjmmvblock in from any to any with ipopts 3*22ab6602Schristospass in inet from any to any with opt nop,rr,zsu 4*22ab6602Schristospass in inet from any to any with opt nop,rr,zsu not opt lsrr,ssrr 5*22ab6602Schristospass in inet from 127.0.0.1/32 to 127.0.0.1/32 with not frag 6*22ab6602Schristospass in inet from 127.0.0.1/32 to 127.0.0.1/32 with frag,frag-body 7b9daf172Sjmmvpass in proto tcp from any to any flags S/FSRPAU with not oow keep state # count 0 8b9daf172Sjmmvblock in proto tcp from any to any with oow 9b9daf172Sjmmvpass in proto tcp from any to any flags S/FSRPAU with not bad,bad-src,bad-nat 10b9daf172Sjmmvblock in proto tcp from any to any flags S/FSRPAU with bad,not bad-src,not bad-nat 11b9daf172Sjmmvpass in quick from any to any with not short 12b9daf172Sjmmvblock in quick from any to any with not nat 13b9daf172Sjmmvpass in quick from any to any with not frag-body 14b9daf172Sjmmvblock in quick from any to any with not lowttl 15b9daf172Sjmmvpass in from any to any with not ipopts,mbcast,not bcast,mcast,not state 16b9daf172Sjmmvblock in from any to any with not mbcast,bcast,not mcast,state 17*22ab6602Schristospass in inet from any to any with opt mtup,mtur,encode,ts,tr,sec,e-sec,cipso,satid,ssrr,addext,visa,imitd,eip,finn,dps,sdb,nsapa,rtralrt,ump 18