diff --git a/src/opnsense/mvc/app/controllers/OPNsense/Firewall/forms/dialogFilterRule.xml b/src/opnsense/mvc/app/controllers/OPNsense/Firewall/forms/dialogFilterRule.xml
index 90f55638eb..9ceb276c15 100644
--- a/src/opnsense/mvc/app/controllers/OPNsense/Firewall/forms/dialogFilterRule.xml
+++ b/src/opnsense/mvc/app/controllers/OPNsense/Firewall/forms/dialogFilterRule.xml
@@ -55,6 +55,13 @@
             When a rule does not have quick enabled, the last matching rule wins.
         </help>
     </field>
+    <field>
+        <id>rule.allowopts</id>
+        <label>Allow options</label>
+        <type>checkbox</type>
+        <help>This allows packets with IP options to pass. Otherwise they are blocked by default.</help>
+        <advanced>true</advanced>
+    </field>
     <field>
         <id>rule.interfacenot</id>
         <label>Interface / Invert</label>
diff --git a/src/opnsense/mvc/app/models/OPNsense/Firewall/Filter.xml b/src/opnsense/mvc/app/models/OPNsense/Firewall/Filter.xml
index 75e2274e5e..cc6350bd37 100644
--- a/src/opnsense/mvc/app/models/OPNsense/Firewall/Filter.xml
+++ b/src/opnsense/mvc/app/models/OPNsense/Firewall/Filter.xml
@@ -131,6 +131,10 @@
                     <Default>0</Default>
                     <Required>Y</Required>
                 </log>
+                <allowopts type="BooleanField">
+                    <Default>0</Default>
+                    <Required>Y</Required>
+                </allowopts>
                 <nosync type="BooleanField">
                     <Default>0</Default>
                     <Required>Y</Required>