If enabled, split packets and compressed packets from addresses that aren't connected to the server will not be processed and are dropped instead.
It also enforces harder limits on the size of connectionless packets coming from addresses that aren't connected, and discards connectionless packets that aren't a known query type.