Data interface rules are applied only to data interfaces. The default DATAIFPROTECT rules are all commented out, although more DATAIFPROTECT rules are dynamically generated by the protect-socket command.