rule ('MULTICAST_OUT -j DROP')