Block unauthenticated inbound connections by default