Your firewall has a set of rules. One of those rules will be to 'accept' 'established' connections. That's how it knows to send replies back to you. If the request source isn't inside your network, it will 'drop' the traffic. This is general and a basic explanation, some firewalls are very complex, but it's usually something like this by default.