# Block all traffic by default (can be overridden by later rules)
block out all flags any no state