example.12 (145510) | example.12 (153877) |
---|---|
1# $FreeBSD: vendor/ipfilter/dist/contrib/ipfilter/rules/example.12 145510 2005-04-25 17:31:50Z darrenr $ | |
2# 3# get rid of all short IP fragments (too small for valid comparison) 4# 5block in proto tcp all with short 6# 7# drop and log any IP packets with options set in them. 8# 9block in log all with ipopts 10# 11# log packets with BOTH ssrr and lsrr set 12# 13log in all with opt lsrr,ssrr 14# 15# drop any source routing options 16# 17block in quick all with opt lsrr 18block in quick all with opt ssrr | 1# 2# get rid of all short IP fragments (too small for valid comparison) 3# 4block in proto tcp all with short 5# 6# drop and log any IP packets with options set in them. 7# 8block in log all with ipopts 9# 10# log packets with BOTH ssrr and lsrr set 11# 12log in all with opt lsrr,ssrr 13# 14# drop any source routing options 15# 16block in quick all with opt lsrr 17block in quick all with opt ssrr |