Click on the minimal arrow button (one) on the appropriate side from the column titles or appropriate mouse click on the route list. The primary rule accepts packets from now set up connections, assuming they are Risk-free to not overload the CPU. The next rule drops any packet that link monitori