1set reassemble yes no-df 2set reassemble no 3match all scrub (no-df) 4match all scrub (min-ttl 25) 5match all scrub (max-mss 224) 6match all scrub (no-df max-mss 224) 7match all set (tos 0x10) 8match out proto esp all set (tos 0x08) 9match out proto ah all set (tos 0x04) 10match out proto icmp all set (tos 0x12) 11match out all set (tos 0x08) tagged THROUGHPUT 12