1#	$NetBSD$
2#
3# drop all packets without IP security options
4#
5block in all
6pass in all with opt sec
7#
8# only allow packets in and out on le1 which are top secret
9#
10block out on le1 all
11pass out on le1 all with opt sec-class topsecret
12block in on le1 all
13pass in on le1 all with opt sec-class topsecret
14