additional reject info for restricted subnets
policy debug messages
automatic action management