Click on the very little arrow button (1) on the correct side on the column titles or ideal mouse click on the route list. The main rule accepts packets from now proven connections, assuming They can be Secure not to overload the CPU. The 2nd rule drops any packet that link monitoring identifies