The first rule accepts packets from currently proven connections, assuming They can be safe to not overload the CPU. The 2nd rule drops any packet that relationship tracking identifies as invalid. Following that, we setup usual acknowledge principles for certain protocols.2. On saved record there must be a column for hostname / route identification