Safe rules for svchost and System

How to set safe CIS firewall rules for svchost and System? I use internet for surfing only.

Maybe you can have a look at these two topics, this guy seems to know what he’s talking about:

https://forums.comodo.com/firewall-help-cis/rules-to-protect-the-system-from-udp-attacks-t104904.0.html;msg763569#msg763569

https://forums.comodo.com/firewall-help-cis/windows-operating-system-trying-to-connect-to-the-internet-is-it-safe-t103656.0.html;msg763144#msg763144

I have always set mine to Outgoing Only, and have never experienced and issue.

Thank you for reply!

Thank you for relevant information!