We want our DROP rule to be executed ahead of any ACCEPT rules which might have been added by another program on the system.