CFP3: Global rule missing for ICMP timeout exceeded

See https://forums.comodo.com/help_for_v3/v3_not_allowing_a_tracert-t15515.0.html;msg110288#msg110288 for a lengthy discussion on why tracert.exe does not work when CFP v3 is installed.

CFP3 auto-generates the app rule to let tracert.exe connect out but it does not auto-generated the global rule to let tracert.exe get back the UDP packets. My last post in that thread notes the rule that should either be included as an install-time default for CFP3 or should be auto-generated by CFP3 for the tracert.exe program.