Is there any information for BiPAC 711 SPI rule?
Default SPI rule must reject connection issued by remote host UNLESS packter filter ALLOWS the connection. User must build packet filter rules to allow specific remote host. But, to make users convenient, SPI allows the connection to virtual servers and the services on the router UNLESS packet filter DROP the connection.