
set timeout udp.single 5

#
# Scrub rules
#
scrub all reassemble tcp no-df 
scrub out all random-id min-ttl  1 max-mss  1460

# 
# Rule  backup ssh access rule
#    backup ssh access rule 
pass in   quick inet proto tcp  from 10.3.14.30  to self port 22  label "RULE -1 -- ACCEPT "  
# 
# Rule  0 (global)
block  log  quick inet  from any  to any no state  label "RULE 0 -- DROP "  
# 
# Rule  fallback rule
#    fallback rule 
block  quick inet  from any  to any no state  label "RULE 10000 -- DROP "  

