1set reassemble yes no-df 2set reassemble no 3match all scrub (no-df) 4match all scrub (min-ttl 25) 5match all scrub (max-mss 224) 6match all scrub (no-df max-mss 224) 7match all scrub (set-tos 0x10) 8match out proto esp all scrub (set-tos 0x08) 9match out proto ah all scrub (set-tos 0x04) 10match out proto icmp all scrub (set-tos 0x12) 11match out all scrub (set-tos 0x08) tagged THROUGHPUT 12