diff --git a/node/Network.cpp b/node/Network.cpp
index 1f8e7ebfe..e8b103bac 100644
--- a/node/Network.cpp
+++ b/node/Network.cpp
@@ -498,7 +498,7 @@ static _doZtFilterResult _doZtFilter(
 						}
 					}
 				}
-				thisRuleMatches = (uint8_t)((cf | rules[rn].v.characteristics) != 0);
+				thisRuleMatches = (uint8_t)((cf & rules[rn].v.characteristics) != 0);
 				FILTER_TRACE("%u %s %c (%.16llx | %.16llx)!=0 -> %u",rn,_rtn(rt),(((rules[rn].t & 0x80) != 0) ? '!' : '='),cf,rules[rn].v.characteristics,(unsigned int)thisRuleMatches);
 			}	break;
 			case ZT_NETWORK_RULE_MATCH_FRAME_SIZE_RANGE: