1*57718be8SEnji Cooperpass in inet from 127.0.0.1/32 to 127.0.0.1/32 with short,frag 2*57718be8SEnji Cooperblock in from any to any with ipopts 3*57718be8SEnji Cooperpass in inet from any to any with opt nop,rr,zsu 4*57718be8SEnji Cooperpass in inet from any to any with opt nop,rr,zsu not opt lsrr,ssrr 5*57718be8SEnji Cooperpass in inet from 127.0.0.1/32 to 127.0.0.1/32 with not frag 6*57718be8SEnji Cooperpass in inet from 127.0.0.1/32 to 127.0.0.1/32 with frag,frag-body 7*57718be8SEnji Cooperpass in proto tcp from any to any flags S/FSRPAU with not oow keep state # count 0 8*57718be8SEnji Cooperblock in proto tcp from any to any with oow 9*57718be8SEnji Cooperpass in proto tcp from any to any flags S/FSRPAU with not bad,bad-src,bad-nat 10*57718be8SEnji Cooperblock in proto tcp from any to any flags S/FSRPAU with bad,not bad-src,not bad-nat 11*57718be8SEnji Cooperpass in quick from any to any with not short 12*57718be8SEnji Cooperblock in quick from any to any with not nat 13*57718be8SEnji Cooperpass in quick from any to any with not frag-body 14*57718be8SEnji Cooperblock in quick from any to any with not lowttl 15*57718be8SEnji Cooperpass in from any to any with not ipopts,mbcast,not bcast,mcast,not state 16*57718be8SEnji Cooperblock in from any to any with not mbcast,bcast,not mcast,state 17*57718be8SEnji Cooperpass in inet from any to any with opt mtup,mtur,encode,ts,tr,sec,e-sec,cipso,satid,ssrr,addext,visa,imitd,eip,finn,dps,sdb,nsapa,rtralrt,ump 18