Click the minimal arrow button (1) on the best side from the column titles or ideal mouse click on the route record. The initial rule accepts packets from previously recognized connections, assuming they are Secure to not overload the CPU. The second rule drops any packet that relationship monito