Click the minor arrow button (1) on the proper side of the column titles or ideal mouse click the route listing. The primary rule accepts packets from presently established connections, assuming They're Risk-free not to overload the CPU. The 2nd rule drops any packet that connection tracking