It would be nice to be able to view definition of the system bypass rules. Monkey see ... Monkey do.

You might also want to consider adding a system bypass rule for L2TP