Problem with IP options processing allow to crash firewall with single packet.
vulners.com/securityvulns/securityvulns:doc:7146