firewall/samba: SFW2-INext-DROP-DEFLT