#2 Ability to change default target, ie. REJECT instead of DROP

[Matthew Rosewarne]

It would be very convenient if there were a way to
choose which action (netfilter target) to take on all
the packets that don't match any of the explicitly
specified protocols. I am thinking in particular of
rejecting packets on unauthorised outgoing
connections instead of dropping them so my apps can
know why they aren't getting through instead of just
timing out. Perhaps this could be implemented in the
Protocols tab as an entry at the top of the list
called "Default".