How to check working process of security group?

In opennebula default security group,i deleted all the inbound rules. Only outbound rules are set. I expected ssh to the VM to fail as there is no inbound rule. But i am able to connect through ssh.
The VM has only the default security group. What could i be missing here?

Can you show me the output of onevm show -x <vmid> and the output of iptables-save in the hypervisor?