Personally I just block everything and create whitelist rules for what I need to connect to.