;COMMENT: Reject packets bigger than 6144 bytes
;DESCRIPTION: Several common attacks, including the famous Ping-Of-Death, rely solely on big packets to create application buffer overrun. Generally packets above 6K are rare for normal Internet activity and they can be rejected.

Big-Packets	
		Comment = "Warn of big incoming packets (>6K)",
		Rule-Action = Deny,
		Log-Control = Enabled,
		Log-Message = "Big packet (>6K)",
		Log-Details = "Whereas packets on the Internet are generally limited to 1500 bytes, big packets can be constructed by sending a series of fragments. Router equipment and firewalls can (optionally) defragment, forming a packet of up to 65535 bytes. Several common attacks, including the famous Ping-Of-Death, rely solely on big packets to create application buffer overrun. Generally packets above 6K are rare for normal Internet activity and they can be rejected.",
		Log-Severity = Warning,
		Packet-Size = ">6144",
		Direction = Incoming,
