Traffic that does not match any of the rules
you defined will match the predefined interzone-default rule at
the bottom of the rulebase and be denied. For visibility into the traffic
that is not matching any of the rules you created, enable logging
on the interzone-default rule: