127a578e7Shenningset reassemble yes no-df 227a578e7Shenningset reassemble no 327a578e7Shenningmatch scrub(no-df) 427a578e7Shenningmatch scrub(min-ttl 25) 527a578e7Shenningmatch scrub(max-mss 224) 627a578e7Shenningmatch scrub(no-df max-mss 224) 7*b5c2d18dSmikebmatch set tos lowdelay 8*b5c2d18dSmikebmatch out proto esp set tos throughput 9*b5c2d18dSmikebmatch out proto ah set tos reliability 10*b5c2d18dSmikebmatch out proto icmp set tos 0x12 11*b5c2d18dSmikebmatch out all tagged THROUGHPUT set tos throughput 12