Click the small arrow button (1) on the right aspect in the column titles or appropriate mouse click the route listing. The 1st rule accepts packets from already recognized connections, assuming they are Risk-free not to overload the CPU. The 2nd rule drops any packet that connection tracking ide