 Re: Tricky question on rules
Remember that the last rule is an implicit silent drop. That's the reason for the cleanup rule, so that you log all drops.
Since it's a drop ANY, it will match everything, as it won't do any deeper inspection if it gets to that point. |