scrub proto tcp reassemble tcp scrub proto tcp all reassemble tcp scrub proto tcp from any to any reassemble tcp scrub proto tcp all fragment crop reassemble tcp scrub proto tcp all fragment drop-ovl reassemble tcp scrub proto tcp all reassemble tcp fragment reassemble scrub proto tcp from { ! } to any reassemble tcp scrub inet proto tcp from { 10.0.0.1, 10.0.0.2 } to { 10.0.0.3, 10.0.0.4 } reassemble tcp scrub log on lo0 proto tcp from any to any min-ttl 25 reassemble tcp scrub log on lo0 inet6 proto tcp from { (lo1000000), (lo0) } to 2000::1 reassemble tcp scrub log on {lo0 lo1000000} proto tcp from any to any reassemble tcp scrub on lo0 proto tcp all reassemble tcp scrub on lo0 proto tcp from any to any fragment reassemble max-mss 224 min-ttl 15 no-df reassemble tcp