example.9 revision 145510 
1#	$FreeBSD: vendor/ipfilter/dist/contrib/ipfilter/rules/example.9 145510 2005-04-25 17:31:50Z darrenr $
2#
3# drop all packets without IP security options
4#
5block in all
6pass in all with opt sec
7#
8# only allow packets in and out on le1 which are top secret
9#
10block out on le1 all
11pass out on le1 all with opt sec-class topsecret
12block in on le1 all
13pass in on le1 all with opt sec-class topsecret
14