1#	$NetBSD: example.9,v 1.1.1.1 2012/03/23 21:20:15 christos Exp $
2#
3# drop all packets without IP security options
4#
5block in all
6pass in all with opt sec
7#
8# only allow packets in and out on le1 which are top secret
9#
10block out on le1 all
11pass out on le1 all with opt sec-class topsecret
12block in on le1 all
13pass in on le1 all with opt sec-class topsecret
14