Hello! I'm setting up this ER605 in my mini Lab. Firewall=>Access Control from rule 1 to 42 are all "Deny" rules and 43 to 45 are "Allow" rules for IP addresses from vpn clients to connect to this ER605, and "Allow" rule for local vpn client subnet to be able to access my internal network.  So I added rule 46 as a "Deny" rule for all the rest of the world. With rule 46 in, nothing can come in!  If I delete rule 46, everything is okay!  It seems like the rule numbers are NOT significant to the implementation of the access rules.  Am I missing something?

Thank in advance for any comment on this.