This means we only filter connections at the destination end, which is a better match for the ingress-only rules.