block-policy: drop - dropp uten tilbakemelding, eller return - Connection refused.
set block-policy return
scrub: normalisering, defragmentering
scrub in all
antispoof:
antispoof for $ytre antispoof for $indre