Default-action for rule-set drop reject accept drop Drop if no prior rules are hit (default) reject Drop and notify source if no prior rules are hit accept Accept if no prior rules are hit ^(drop|reject|accept)$