1145510Sdarrenrpass in from localhost to localhost with short,frags 222514Sdarrenrblock in from any to any with ipopts 322514Sdarrenrpass in from any to any with opt nop,rr,zsu 422514Sdarrenrpass in from any to any with opt nop,rr,zsu not opt ssrr,lsrr 5153877Sguidopass in from localhost to localhost and not frag 6153877Sguidopass in from localhost to localhost with frags,frag-body 7145510Sdarrenrpass in proto tcp all flags S with not oow keep state 8161351Sguidoblock in proto tcp all with oow 9145510Sdarrenrpass in proto tcp all flags S with not bad,bad-src,bad-nat 10161351Sguidoblock in proto tcp all flags S with bad,not bad-src,not bad-nat 11161351Sguidopass in quick all with not short 12153877Sguidoblock in quick all with not nat 13161351Sguidopass in quick all with not frag-body 14153877Sguidoblock in quick all with not lowttl 15161351Sguidopass in all with mbcast,not bcast,multicast,not state,not ipopts 16161351Sguidoblock in all with not mbcast,bcast,not multicast,state 17153877Sguidopass in from any to any with opt mtur,mtup,encode,ts,tr,sec,cipso,satid,ssrr,visa,imitd,eip,finn,dps,sdb,nsapa,rtralrt,ump,addext,e-sec 18