How does a firewall process a packet that has more than one NAT policy rule that matches a packet?

-Each matching rule in the list is applied from the top down, with cumulative changes being processed at the end of the list.

-The first rule matching the packet is applied and processed, skipping the others.

-The firewall issues an error when committing NAT policy rules that can affect the same packet.

-The last matching rule in the list is applied and processed.