The firewall uses a bitmask for representing what operations a particular rule should be applied to. Consquently it cannot use the query classifier qc_query_op_t enumerator values as such, as they are consecutive numbers.