1# $NetBSD$ 2# 3# drop all packets without IP security options 4# 5block in all 6pass in all with opt sec 7# 8# only allow packets in and out on le1 which are top secret 9# 10block out on le1 all 11pass out on le1 all with opt sec-class topsecret 12block in on le1 all 13pass in on le1 all with opt sec-class topsecret 14