Each physical port on a Passport switch has a default action mode of forward associated with it. A packet that matches any filter with the action mode of drop is dropped. A packet that matches one filter having the action mode of forward is forwarded only if it does not also match a filter with the drop action mode. If a packet matches multiple filters, if any one of them is drop, the packet is dropped.