Ability to allow IP options
Plus Target Version:
PF sensibly blocks packets with IP options by default.
But we have no way to bypass this for scenarios where IP options are needed. Need an advanced checkbox for allow-opts.