Global Options Policy for handling of all IPv4 ICMP echo requests enable disable enable Enable processing of all IPv4 ICMP echo requests disable Disable processing of all IPv4 ICMP echo requests (enable|disable) enable Policy for handling broadcast IPv4 ICMP echo and timestamp requests enable disable enable Enable processing of broadcast IPv4 ICMP echo/timestamp requests disable Disable processing of broadcast IPv4 ICMP echo/timestamp requests (enable|disable) disable Apply configured firewall rules to traffic switched by bridges Apply configured IPv4 firewall rules Apply configured IPv6 firewall rules Policy for handling IPv4 directed broadcast forwarding on all interfaces enable disable enable Enable IPv4 directed broadcast forwarding on all interfaces disable Disable IPv4 directed broadcast forwarding on all interfaces (enable|disable) enable Policy for handling IPv4 packets with source route option enable disable enable Enable processing of IPv4 packets with source route option disable Disable processing of IPv4 packets with source route option (enable|disable) disable Policy for logging IPv4 packets with invalid addresses enable disable enable Enable logging of IPv4 packets with invalid addresses disable Disable logging of Ipv4 packets with invalid addresses (enable|disable) enable Policy for handling received IPv4 ICMP redirect messages enable disable enable Enable processing of received IPv4 ICMP redirect messages disable Disable processing of received IPv4 ICMP redirect messages (enable|disable) disable Retains last successful value if domain resolution fails Domain resolver update interval u32:10-3600 Interval (seconds) 300 Policy for sending IPv4 ICMP redirect messages enable disable enable Enable sending IPv4 ICMP redirect messages disable Disable sending IPv4 ICMP redirect messages (enable|disable) enable Policy for IPv4 source validation by reversed path, as specified in RFC3704 strict loose disable strict Enable IPv4 Strict Reverse Path Forwarding as defined in RFC3704 loose Enable IPv4 Loose Reverse Path Forwarding as defined in RFC3704 disable No IPv4 source validation (strict|loose|disable) disable Global firewall state-policy Global firewall policy for packets part of an established connection #include #include #include Global firewall policy for packets part of an invalid connection #include #include #include Global firewall policy for packets part of a related connection #include #include #include Policy for using TCP SYN cookies with IPv4 enable disable enable Enable use of TCP SYN cookies with IPv4 disable Disable use of TCP SYN cookies with IPv4 (enable|disable) enable Connection timeout options #include RFC1337 TCP TIME-WAIT assasination hazards protection enable disable enable Enable RFC1337 TIME-WAIT hazards protection disable Disable RFC1337 TIME-WAIT hazards protection (enable|disable) disable Policy for handling received ICMPv6 redirect messages enable disable enable Enable processing of received ICMPv6 redirect messages disable Disable processing of received ICMPv6 redirect messages (enable|disable) disable Policy for IPv6 source validation by reversed path, as specified in RFC3704 strict loose disable strict Enable IPv6 Strict Reverse Path Forwarding as defined in RFC3704 loose Enable IPv6 Loose Reverse Path Forwarding as defined in RFC3704 disable No IPv6 source validation (strict|loose|disable) disable Policy for handling IPv6 packets with routing extension header enable disable enable Enable processing of IPv6 packets with routing header type 2 disable Disable processing of IPv6 packets with routing header (enable|disable) disable