I noticed that my fourth and final global rule was:
block and log IP in from IP any to IP any where protocal is any
huh? so this means everything is going to be blocked from anywhere? is this normal? i have not changed any global rules since I got CIS installed.