UDP total length field specifies -- Checkpoint Se-
cuRemote violates NAT-T drafts. (Default: No)
IPOptionSizes
Validity of IP header option sizes. (Default: Valid-
ateLogBad)
IPOPT_SR
How to handle IP packets with contained source or
return routes. (Default: DropLog)
IPOPT_TS
How to handle IP packets with contained
Timestamps. (Default: DropLog)
IPOPT_RTRALT
How to handle IP packets with contained route alert.
(Default: ValidateLogBad)
IPOPT_OTHER
How to handle IP options not specified above.
(Default: DropLog)
DirectedBroadcasts
How to handle directed broadcasts being passed
from one interface to another. (Default: DropLog)
IPRF
How to handle the IP Reserved Flag, if set; it should
never be. (Default: DropLog)
StripDFOnSmall
Strip the "DontFragment" flag for packets of this
size or smaller. (Default: 65535)
MulticastIPEnetOnMismatch
What action to take when ethernet and IP multicast
addresses do not match. (Default: DropLog)
Note
This object type does not have an identifier and is identified by the name of the type
only. There can only be one instance of this type.
3.52.11. L2TPServerSettings
Description
PPTP/L2TP server settings.
Properties
L2TPBeforeRules
Pass L2TP connections sent to the security gateway
directly to the L2TP engine without consulting the
ruleset. (Default: Yes)
PPTPBeforeRules
Pass PPTP connections sent to the security gateway
directly to the PPTP engine without consulting the
ruleset. (Default: Yes)
Note
This object type does not have an identifier and is identified by the name of the type
only. There can only be one instance of this type.
3.52.11. L2TPServerSettings Chapter 3. Configuration Reference
180