Jasper Yu says to YSITD
ip firewall filter forward chain action block