Please help with this! Computer security question

Question

Where should a "deny all catch all" rule be positioned and why?

also what is a quasi vpn?

Answer 1

I'm going to make the assumption that your list of rules is in an "if" type of statement structure. In general, you want the sieve for positive selection in any rule list to be the smallest at the top and get bigger as you move down the possible "if" conditions.

That would put the final "catch all" or "deny all", depending on how your rule list is written, at the bottom. If you're using a consecutive set of nested "if" type structures, it would be at the bottom in the final "else" construction such that any condition that was not binned into one of the nested "if" conditions would be certain to "something else". That keeps anything from falling out of a "catch" or remaining in a "deny".