;COMMENT: Reject all UDP traffic - Except DNS lookups
;DESCRIPTION: UDP is commonly used for DNS lookups and (sometimes) streaming multimedia. Internet worms and DOS (Denial Of Service) attacks often rely on UDP traffic. This rule file denies all UDP traffic, except the required DNS traffic.


Allow-DNS
		Comment = "Allow DNS traffic (port 53)",
		Direction = Bidirectional,
		Protocol = UDP,
		Destination-Port = "53",
		Rule-Action = NAT,

Deny-UDP
		Comment = "Deny rest of UDP traffic",
		Protocol = UDP,
		Rule-Action = Deny,
		Log-Control = Enabled,
		Log-Message = "Denied non-DNS UDP packet",
		Log-Details = "UDP traffic other than DNS traffic was denied. UDP, short for User Datagram Protocol, is a connectionless protocol that like TCP, runs on top of IP networks. UDP provides few error recovery services, but instead offers a direct way to send and receive datagrams. UDP is often used in Internet worms and DOS attacks. Use of UDP in multimedia-applications and custom business applications is normal and such software will not work on security levels that block UDP.",
		Log-Severity = Warning,
