Firewall & ACL Rule Order

Two skills in one drill: trace a packet through a fixed ruleset to see which rule fires first, then reorder a shuffled ruleset so it actually does what it is supposed to. First match wins, every time.