The effectiveness of a Firewall rule is also reduced with additional conditions. The following conditions are available:
- Only packets with certain ToS and/or DiffServ markings.
- Only, if the connection does not yet exist.
- Only for default route (Internet).
- Only for VPN routes.