1# pf drops IP options by default, test combines frag with IPv4 options
2pass inet allow-opts
3
4# turning on and off pf via ssh connection does not work with states
5pass proto tcp from port ssh flags A/SA no state
6pass proto tcp to port ssh flags A/SA no state
7