[FS#920] Final (default) rule in user defined zones wrong

[LEDE Bugs]

The following task has a new comment added:

FS#920 - Final (default) rule in user defined zones wrong
User who did this - Jo-Philipp Wich (jow-)

----------
Yes it is. The "option forward" policy in the globals section deals with unmatched, forwarded traffic leaving a zone.

Either switch the global policy to reject instead of drop to cleanly reject traffic or add a config rule section with "option src dmz", "option dest *" and "option target REJECT" if you do not want to switch the global forwarding policy to reject.
----------

More information can be found at the following URL:
https://bugs.lede-project.org/index.php?do=details&task_id=920#comment3036