122514Sdarrenr# 222514Sdarrenr# get rid of all short IP fragments (too small for valid comparison) 322514Sdarrenr# 422514Sdarrenrblock in proto tcp all with short 522514Sdarrenr# 622514Sdarrenr# drop and log any IP packets with options set in them. 722514Sdarrenr# 822514Sdarrenrblock in log all with ipopts 922514Sdarrenr# 1022514Sdarrenr# log packets with BOTH ssrr and lsrr set 1122514Sdarrenr# 1222514Sdarrenrlog in all with opt lsrr,ssrr 1322514Sdarrenr# 1422514Sdarrenr# drop any source routing options 1522514Sdarrenr# 1622514Sdarrenrblock in quick all with opt lsrr 1722514Sdarrenrblock in quick all with opt ssrr 18