D-Link DFL-2500 - Manual (Page 323)

Once a whole packet has been marked as illegal, NetDefendOS is able to retain this in its memory in
order to prevent further fragments of that packet from arriving.
Default: 60 seconds
ReassIllegalLinger Chapter 13. Advanced Settings
323