Block a user
fix: stop differential apply rewriting unchanged rules
Fix MSS clamp loading the option as an IPv6 exthdr
Add try/confirm safe-apply with out-of-process revert
Match any listed port or protocol in a rule
Expand comma zone lists in rule source and dest
Classify prodnxsr0020 as a network router
Add 198.18.2.0/24 router loopback subnet