1pass in proto ipv6-icmp all icmp-type echo keep frags 2pass in proto ipv6-icmp all icmp-type echo keep frags keep state 3pass in proto tcp all keep frags keep state 4