Regarding the OUTPUT chain: I want to have a default policy of ACCEPT, but for a specific destination CIDR, I want to allow outgoing connections only via SSH. Incoming traffic f