Apply the firewall

A firewall walks its rules in order and stops at the first match. A last rule of deny-inbound makes the policy fail closed. Only the ports you named stay open.

The policy allows TCP 443 from anywhere and denies other inbound traffic. Call the two packets.