Firewall rules for system and svchost

Not sure what I’m doing with this, keep getting a notification “system is trying to receive a connection from - nbsess(139)”. Had a few notifications for svchost as well. Saw on another forum to set both system and svchost to “outgoing only” in firewall rules which I’ve done, is this OK? is a laptop that’s accessing the router wirelessly, is it innocent and soemthing I should have allowed?

Edit: added screenshot of the “intrusion attempts”

[attachment deleted by admin]