A flow uses stateless security rules. What must be considered for return packets?

1. Return traffic is always permitted regardless of rules.
2. Responses must use the same source and destination ports as requests.
3. Explicit rules must permit the required return traffic.
4. DNS automatically adds missing return rules.