- Incoming connections to the router use INPUT.
- Incoming traffic is considered as a potential threat to the router.
- Incoming connections are filtered on the upstream zone.
- Outgoing connections from the router use OUTPUT.
- Outgoing traffic is not considered a threat to the router.
- Outgoing connections are not filtered by default.