example.12 revision 1.1.1.1.2.2
1# $NetBSD: example.12,v 1.1.1.1.2.2 2012/04/17 00:03:23 yamt Exp $ 2# 3# get rid of all short IP fragments (too small for valid comparison) 4# 5block in proto tcp all with short 6# 7# drop and log any IP packets with options set in them. 8# 9block in log all with ipopts 10# 11# log packets with BOTH ssrr and lsrr set 12# 13log in all with opt lsrr,ssrr 14# 15# drop any source routing options 16# 17block in quick all with opt lsrr 18block in quick all with opt ssrr 19