Click the small arrow button (one) on the ideal side on the column titles or ideal mouse click on the route checklist.The 1st rule accepts packets from already proven connections, assuming they are Protected not to overload the CPU. The 2nd rule drops any packet that connection tracking identifies as invalid. Following that, we set up standard ackn