Click on the tiny arrow button (1) on the appropriate facet in the column titles or appropriate mouse click the route list. The initial rule accepts packets from now founded connections, assuming they are safe not to overload the CPU. The 2nd rule drops any packet that connection monitoring ident