# drop packets composed of small fragments
option small_frags on eth0

# default ruleset
pass in on eth0 all
pass out on eth0 all

# blocks Key-validation
block out on eth0 proto udp from any port > 1000 to any port = 29910