Source port filtering is enabled by default to prevent traffic from egressing out the same interface it ingressed on.