1*57718be8SEnji Cooperpass in from localhost to localhost with short,frags 2*57718be8SEnji Cooperblock in from any to any with ipopts 3*57718be8SEnji Cooperpass in from any to any with opt nop,rr,zsu 4*57718be8SEnji Cooperpass in from any to any with opt nop,rr,zsu not opt ssrr,lsrr 5*57718be8SEnji Cooperpass in from localhost to localhost and not frag 6*57718be8SEnji Cooperpass in from localhost to localhost with frags,frag-body 7*57718be8SEnji Cooperpass in proto tcp all flags S with not oow keep state 8*57718be8SEnji Cooperblock in proto tcp all with oow 9*57718be8SEnji Cooperpass in proto tcp all flags S with not bad,bad-src,bad-nat 10*57718be8SEnji Cooperblock in proto tcp all flags S with bad,not bad-src,not bad-nat 11*57718be8SEnji Cooperpass in quick all with not short 12*57718be8SEnji Cooperblock in quick all with not nat 13*57718be8SEnji Cooperpass in quick all with not frag-body 14*57718be8SEnji Cooperblock in quick all with not lowttl 15*57718be8SEnji Cooperpass in all with mbcast,not bcast,multicast,not state,not ipopts 16*57718be8SEnji Cooperblock in all with not mbcast,bcast,not multicast,state 17*57718be8SEnji Cooperpass in from any to any with opt mtur,mtup,encode,ts,tr,sec,cipso,satid,ssrr,visa,imitd,eip,finn,dps,sdb,nsapa,rtralrt,ump,addext,e-sec 18