SoMatch only the ICMP and TCP flows coming from the subnet 126.96.36.199/16
SOlution guide :
match source address 188.8.131.52 255.255.0.0
match protocol 1
Where does it say that subnet 184.108.40.206 is matched only for TCP and ICMP.
Should not we have
match protocol 6 also?