why check "allow incoming legacy connections"?