diff --git a/node/Network.cpp b/node/Network.cpp
index d80170d792..2f0d0435e3 100644
--- a/node/Network.cpp
+++ b/node/Network.cpp
@@ -117,7 +117,7 @@ static _doZtFilterResult _doZtFilter(
 		// First check if this is an ACTION
 		if ((unsigned int)rt <= (unsigned int)ZT_NETWORK_RULE_ACTION__MAX_ID) {
 			if (thisSetMatches) {
-				fprintf(stderr, "%02u %02u thisSetMatches. inTagRule: %u\n\n", rn, rt, inTagRule);
+				fprintf(stderr, "%02u %02d thisSetMatches. inTagRule: %u\n\n", rn, rt, inTagRule);
 				switch(rt) {
 					case ZT_NETWORK_RULE_ACTION_PRIORITY:
 						qosBucket = (rules[rn].v.qosBucket >= 0 || rules[rn].v.qosBucket <= 8) ? rules[rn].v.qosBucket : 4; // 4 = default bucket (no priority)
@@ -474,9 +474,9 @@ static _doZtFilterResult _doZtFilter(
 							// about their tags yet. They will filter on inbound and we will filter
 							// once we get their tag. If we are a tee/redirect target we are also
 							// not strict since we likely do not have these tags.
-							fprintf(stderr, "%02u %02u outbound, no remote tag %u %u\n", rn, rt, localTag->id(), localTag->value());
 							inTagRule = 1;
-							thisRuleMatches = 1;
+							thisRuleMatches = (rules[rn].t >> 7) ^ 1;
+							fprintf(stderr, "%02u %02u outbound, no remote tag %u %u. match %u\n", rn, rt, localTag->id(), localTag->value(), thisRuleMatches);
 						}
 					}
 				} else {