nuqneH, Doesn't mandatory OPES bypass feature requirement (it is noted as "must") look illogical in firewall environment? First, it makes code more complicated and second, it should be never used ;-)