q about global rules

I noticed that my fourth and final global rule was:
block and log IP in from IP any to IP any where protocal is any

huh? so this means everything is going to be blocked from anywhere? is this normal? i have not changed any global rules since I got CIS installed.

That’s part of the new default stealth Global Rules. They block and log all unsolicited incoming traffic. If you need open port(s) for server or p2p application you need to “punch holes” in the Global Rules.