Whitelist certain traffic in an existing irule

Yes, you probably should include an explicit reject (or drop) as the default condition (else) if traffic does not match any of your rules. It depends on whether you want to alert the client via a reset or just silently drop the connection.