how-to block ads
ALLOW (or deny, if the behavior is naughty)
application [the suspect application]
local port ANY
remote port ANY
remote address ANY
log - alert
Note: This rule should be deleted or unchecked and replaced with an appropriate permanent rule as soon as it captures the information you need. It is a diagnostic rule only.
Position: Above all other rules.