It takes dedication, thought, and understanding to implement a "Default Deny"
policy, which is why it is so seldom done. It's not that much harder to do
than "Default Permit" but you'll sleep much better at night.