in-path passthrough rule block

addr	Specifies the subnet IP address. • <subnet> - IPv4 or IPv6 address and mask: – For IPv4 addresses, use this format: xxx.xxx.xxx.xxx/xx – For IPv6 addresses, use this format: x:x:x::x/xxx • all-ip - Specifies all IPv4 and IPv6 addresses. • all-ipv4 - Specifies all IPv4 addresses. • all-ipv6 - Specifies all IPv6 addresses.
port start <port>	Specifies the starting port number of the port range.
end <port>	Specifies the ending port number of the port range.
description "<description>"	Specifies a description of the rule. Enclose the description in quotation marks.
rulenum <rule-number>	Specifies a rule number from 1 to N. The system evaluates rules in numerical order starting with rule 1. If the conditions set in the rule match, then the rule is applied, and the system moves on to the next packet. If the conditions set in the rule do not match, the system consults the next rule. For example, if the conditions of rule 1 do not match, rule 2 is consulted. If rule 2 matches the conditions, it is applied, and no further rules are consulted.
vlan <vlan-id>	Specifies the VLAN ID. • all for all VLANs. • 0 (zero) for untagged VLANs. • VLAN numbers from 1 to 4094 for tagged VLANs.

Use reset connection rules to reset an existing connection and force a new connection to be formed. The feature ensures that upon reboot the system resets certain long-lived pass-through connections so they can be optimized. A badly formed rule can block traffic.