Intregrating Anti Virus

use action=log before action=drop to see exact addresses

No Normis , just a destination address list rule and a straight drop rule