Additional conditions can be used to restrict the effectiveness of a firewall rule. The following conditions are available:
- Only for packets with certain ToS and/or DiffServ markings
- Only if not connected
- Only for the default route (Internet)
- Only for VPN routes
