Rule applies only to traffic coming in to the system.