1# $NetBSD: example.9,v 1.1.1.1 2012/03/23 21:20:15 christos Exp $ 2# 3# drop all packets without IP security options 4# 5block in all 6pass in all with opt sec 7# 8# only allow packets in and out on le1 which are top secret 9# 10block out on le1 all 11pass out on le1 all with opt sec-class topsecret 12block in on le1 all 13pass in on le1 all with opt sec-class topsecret 14