Which of the following should a security administrator adhere to when setting up a new set of firewall rules?