The first rule accepts packets from now established connections, assuming They can be Safe and sound not to overload the CPU. The 2nd rule drops any packet that connection tracking identifies as invalid. Following that, we setup common accept rules for distinct protocols.RoMON mode requires that agent is the latest Variation to give you the option