Packet Filtering Rules

• Typically applied in a specific order

  • First match applies

• One filter per rule

• Default rule?

  • “Default Deny” safest
  • Warning: implied default rule: Deny or Allow?
  • What is the failure mode? Deny or Allow all?