Assertion: firewall's rule | /r/CapableOf | decide ultimate fate of the packet
Facets:
Source sentences:
text: a rule matches the packet and decides the ultimate fate of the packet, for example by calling one of the ACCEPT or DROP , or a module returning such an ultimate fate; or a rule calls the RETURN verdict, in which case processing returns to the calling chain; or the end of the chain is reached; traversal either continues in the parent chain (as if RETURN was used), or the base chain policy, which is an ultimate fate, is used.