1# pf drops IPv6 options header by default, test combines frag with opt header 2pass inet6 allow-opts 3 4# turning on and off pf via ssh connection does not work with states 5pass proto tcp from port ssh flags A/SA no state 6pass proto tcp to port ssh flags A/SA no state 7