Add rule to reject unmatched inbound packets