1set reassemble yes no-df 2set reassemble no 3match all scrub (no-df) 4match all scrub (min-ttl 25) 5match all scrub (max-mss 224) 6match all scrub (no-df max-mss 224) 7match all set ( tos 0x10 ) 8match out proto esp all set ( tos 0x08 ) 9match out proto ah all set ( tos 0x04 ) 10match out proto icmp all set ( tos 0x12 ) 11match out all set ( tos 0x08 ) tagged THROUGHPUT 12