If it is set to deny(1), all packets matching
this filter will be discarded and scanning of the
remainder of the filter list will be aborted. If
it is set to permit(2), all packets matching this
filter will be allowed for further bridging or
routing processing.