anchor.diff:            "User"
             "SuppressPrefixLength"
           ])
  +        (assertInt "TypeOfService")
           (assertRange "TypeOfService" 0 255)
           (assertInt "FirewallMark")
  -        # The following check won't work on nix <= 2.2
  -        # see https://github.com/NixOS/nix/pull/2378
  -        #
  -        # Add this again when we'll have drop the
  -        # nix < 2.2 support.
  -        #  (assertRange "FirewallMark" 1 4294967295)
  -        (assertMinimum "FirewallMark" 1)
  +        (assertRange "FirewallMark" 1 4294967295)
           (assertInt "Priority")
           (assertPort "SourcePort")
           (assertPort "DestinationPort")
           (assertValueOneOf "InvertRule" boolValues)
           (assertValueOneOf "Family" ["ipv4" "ipv6" "both"])
  +        (assertInt "SuppressPrefixLength")
           (assertRange "SuppressPrefixLength" 0 128)
         ];
   
  
positive.code:         (assertValueOneOf "RequestBroadcast" boolValues)
          (assertInt "RouteMetric")
          (assertInt "RouteTable")
          # The following check won't work on nix <= 2.2
          # see https://github.com/NixOS/nix/pull/2378
          #
          # Add this again when we'll have drop the
          # nix < 2.2 support.
          # (assertRange "RouteTable" 0 4294967295)
          (assertMinimum "RouteTable" 0)
          (assertByteFormat "RouteMTUBytes")
          (assertPort "ListenPort")
          (assertValueOneOf "SendRelease" boolValues)
  
negative.code:           "LooseBinding"
            "ReorderHeader"
          ])
          (assertInt "Id")
          (assertRange "Id" 0 4094)
          (assertValueOneOf "GVRP" boolValues)
          (assertValueOneOf "MVRP" boolValues)
  