set reassemble yes no-df
set reassemble no 
match all scrub (no-df)
match all scrub (min-ttl 25)
match all scrub (max-mss 224)
match all scrub (no-df max-mss 224)
match all set ( tos 0x10 )
match out proto esp all set ( tos 0x08 )
match out proto ah all set ( tos 0x04 )
match out proto icmp all set ( tos 0x12 )
match out all set ( tos 0x08 ) tagged THROUGHPUT