1set reassemble yes no-df 2set reassemble no 3match scrub(no-df) 4match scrub(min-ttl 25) 5match scrub(max-mss 224) 6match scrub(no-df max-mss 224) 7match set tos lowdelay 8match out proto esp set tos throughput 9match out proto ah set tos reliability 10match out proto icmp set tos 0x12 11match out all tagged THROUGHPUT set tos throughput 12