A firewall feature that ensures anything not given an explicit allow will be denied.