122514Sdarrenr#
222514Sdarrenr# get rid of all short IP fragments (too small for valid comparison)
322514Sdarrenr#
422514Sdarrenrblock in proto tcp all with short
522514Sdarrenr#
622514Sdarrenr# drop and log any IP packets with options set in them.
722514Sdarrenr#
822514Sdarrenrblock in log all with ipopts
922514Sdarrenr#
1022514Sdarrenr# log packets with BOTH ssrr and lsrr set
1122514Sdarrenr#
1222514Sdarrenrlog in all with opt lsrr,ssrr
1322514Sdarrenr#
1422514Sdarrenr# drop any source routing options
1522514Sdarrenr#
1622514Sdarrenrblock in quick all with opt lsrr
1722514Sdarrenrblock in quick all with opt ssrr
18