set reassemble yes no-df
set reassemble no
match scrub(no-df)
match scrub(min-ttl 25)
match scrub(max-mss 224)
match scrub(no-df max-mss 224)
match scrub(set-tos lowdelay)
match out proto esp scrub(set-tos throughput)
match out proto ah scrub(set-tos reliability)
match out proto icmp scrub(set-tos 0x12)
match out all tagged THROUGHPUT scrub (set-tos throughput)