This is one exact toy policy decision, not a production firewall.
highlighted = computed this step
What this decision shows
This toy example checks one tuple against one ordered firewall rule table.
rule rows=3
Checked values
The trust boundary recomputes the tuple fields, every row match, the skipped first row, and winner row 2.
winner row=2
What this does not model
NOTE: toy ordered firewall rule example only; not connection tracking, NAT state, zones, interface direction, ephemeral port policy, stateful inspection, rule shadowing analysis, ACL hardware behavior, or production firewall configuration.
tuple bytes=13
Summary
Decode the tuple, test rows in order, and keep the first matching action.