1pass in inet from 127.0.0.1/32 to 127.0.0.1/32 with short,frag 2block in from any to any with ipopts 3pass in inet from any to any with opt nop,rr,zsu 4pass in inet from any to any with opt nop,rr,zsu not opt lsrr,ssrr 5pass in inet from 127.0.0.1/32 to 127.0.0.1/32 with not frag 6pass in inet from 127.0.0.1/32 to 127.0.0.1/32 with frag,frag-body 7pass in proto tcp from any to any flags S/FSRPAU with not oow keep state # count 0 8block in proto tcp from any to any with oow 9pass in proto tcp from any to any flags S/FSRPAU with not bad,bad-src,bad-nat 10block in proto tcp from any to any flags S/FSRPAU with bad,not bad-src,not bad-nat 11pass in quick from any to any with not short 12block in quick from any to any with not nat 13pass in quick from any to any with not frag-body 14block in quick from any to any with not lowttl 15pass in from any to any with not ipopts,mbcast,not bcast,mcast,not state 16block in from any to any with not mbcast,bcast,not mcast,state 17pass in inet from any to any with opt mtup,mtur,encode,ts,tr,sec,e-sec,cipso,satid,ssrr,addext,visa,imitd,eip,finn,dps,sdb,nsapa,rtralrt,ump 18