help: Global firewall policy for packets part of an invalid connection

commit:expression: $VAR(./action/) != "";
        "No action set for state 'invalid'"