It accepts packets for established tcp connections, that is opened by a device on LAN.