# This is a comment
/* This is also a comment */
default reject notify log;

for 128.45.0.0 netmask is 255.255.255.0 ;

for su-net-temp netmask is 255.255.255.0;
for 45.128.0.0 netmask is 255.255.255.0;

from host mogul to net su-net-temp accept;

from host decwrl to net zko-net reject notify;

from host any to any tcp port reserved reject log;
from host any tcp port 3 to any tcp port reserved reject notify log;
from host any tcp port 3 to any reject;

from any icmp type redirect to any accept;
from host any proto-not tcp to any accept;
from proto-not 3 to host-not any accept;
from proto 3 to host-not any accept;
from any to host-not any tcp port-not telnet accept;
from any to host-not any tcp port-not telnet accept;

from host any tcp port telnet to host any tcp port reserved reject;
