Bug fixed:

Default drop rul for inbound chain gets dropped by CsNetFilter
This would have been bad (tm)