summaryrefslogtreecommitdiff
path: root/dist/ipf/rules/example.12
blob: 73fbb1190c2a1ddb057b227d5d1f4fd660fc1697 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
#	$NetBSD: example.12,v 1.1.1.1 1999/12/11 22:24:11 veego Exp $
#
# get rid of all short IP fragments (too small for valid comparison)
#
block in proto tcp all with short
#
# drop and log any IP packets with options set in them.
#
block in log all with ipopts
#
# log packets with BOTH ssrr and lsrr set
#
log in all with opt lsrr,ssrr
#
# drop any source routing options
#
block in quick all with opt lsrr
block in quick all with opt ssrr