Click on the small arrow button (1) on the best facet in the column titles or ideal mouse click the route record. The 1st rule accepts packets from currently proven connections, assuming They're safe not to overload the CPU. The 2nd rule drops any packet that link tracking identifies as inval