Under general settings there are options for input/output/forward.
The default is:
input: accept
output: accept
forward: reject
Is this like a "default policy" that applies to scenarios not covered by a zone policy or traffic rule?
If so, why would any of them be set to accept by default?
If I change mine all to reject I don't notice any change in functionality.