Add options to match packet size on firewall rules. This can be done by matching ip headers:
More info:
PR: https://github.com/vyos/vyos-1x/pull/1502