The status of filter established feature. This option controls whether or not filter rules are applied to packets which are part of an existing, established connection or pseudo-connection. When this option is enabled, all ingress packets are subject to filter rules. When the option is disabled, filter rules are not applied to packets which are part of an existing connection. That is useful to prevent filtering of reply traffic. This option is disabled by default.