Automatic Fix

The Bypass firewall rules for traffic on the same interface option located under System > Advanced on the Fire- wall/NAT tab activates rules for traffic to/from the static route networks which are much more permissive when it comes to creating states for TCP traffic and allowing it to pass. The rules allow any TCP packets, regardless of their flags, to create a state and also have the “sloppy state” type set which performs a less strict state match.