The initial rule accepts packets from already recognized connections, assuming They may be Protected not to overload the CPU. The next rule drops any packet that link tracking identifies as invalid. After that, we build standard accept policies for specific protocols. With compatibility throughou