Use drop rule not filter chain