shadowed rule

Also written: shadowed

A rule that never runs because a broader rule above it matches first, like the old router's database deny below an "office to anywhere" allow.