Shadowed rule

Also written: shadowed

A firewall rule that never matches because an earlier, more general rule catches its packets first, as in rules-bad.csv.

Where the book teaches it