with

Description

Enables a rule to match packets containing IP options and fragments. Use with ipopts for IPv4 rules and with frag for IPv4 or IPv6 rules. It is also possible to insert a no keyword to match packets not including fragments or IP options.

Synopsis

{block | pass} {in| out} {to | from} address_scope with [no] {frag | ipopts}

address_scope can be a unique IP address, an address space, or the keywords !, all, me, or any.