1#	$NetBSD$
2#
3# get rid of all short IP fragments (too small for valid comparison)
4#
5block in proto tcp all with short
6#
7# drop and log any IP packets with options set in them.
8#
9block in log all with ipopts
10#
11# log packets with BOTH ssrr and lsrr set
12#
13log in all with opt lsrr,ssrr
14#
15# drop any source routing options
16#
17block in quick all with opt lsrr
18block in quick all with opt ssrr
19