diff --git a/netstack/src/filter/table.rs b/netstack/src/filter/table.rs
index 7edf68d3a4..9f707a5a48 100644
--- a/netstack/src/filter/table.rs
+++ b/netstack/src/filter/table.rs
@@ -124,10 +124,12 @@ impl FilterTable {
                 }
             }
         }
-        self.default_policy
-            .get(&ctx.hook)
-            .copied()
-            .unwrap_or(Verdict::Accept)
+        final_verdict.unwrap_or_else(|| {
+            self.default_policy
+                .get(&ctx.hook)
+                .copied()
+                .unwrap_or(Verdict::Accept)
+        })
     }
 
     /// Inserts a rule. The rule's `id` is overwritten with a fresh id from