default policy is to drop outbound traffic
Readme