Assertion: firewall's rule | /r/CapableOf | match the packet
Facets:
Source sentences:
text: If the packet filter does not find a rule that matches the packet, then it imposes a default rule.
text: If a rule does match the packet, the rule takes the action indicated by the target/verdict, which may result in the packet being allowed to continue along the chain or may not.
text: a rule matches the packet and decides the ultimate fate of the packet, for example by calling one of the ACCEPT or DROP , or a module returning such an ultimate fate; or a rule calls the RETURN verdict, in which case processing returns to the calling chain; or the end of the chain is reached; traversal either continues in the parent chain (as if RETURN was used), or the base chain policy, which is an ultimate fate, is used.