CFP3: Global rule missing for ICMP timeout exceeded

See;msg110288#msg110288 for a lengthy discussion on why tracert.exe does not work when CFP v3 is installed.

CFP3 auto-generates the app rule to let tracert.exe connect out but it does not auto-generated the global rule to let tracert.exe get back the UDP packets. My last post in that thread notes the rule that should either be included as an install-time default for CFP3 or should be auto-generated by CFP3 for the tracert.exe program.