    {
    ## Set Default rule on FORWARD chain to denylog
    }
    /sbin/iptables --policy FORWARD DROP
    /sbin/iptables --append FORWARD --jump denylog
