[phoenixsecure]

Hi,

I have a question, normaly in the rules you put a clean-up rule at the end, any any any drop. So far so good. But what append when you have protocol that are not included in the any rule. Everyone must remember X11 on NG and now in NGX you can create a protocol and uncheck the match for any. If my memory is correct the default behavior for rules is if something does not match any rules its allow. So if I put any any any drop at the end of my rules, does it treat that rule differently because its the last one or not. If not what append to protocol not included in any.

Thanks.