Though this is a partial block which is appreciated.
However, all the blocks are through default normal firewall query..which in normal cases will be allowed by the user.
Slight dis appointment seeing no behaviour analysis/ anti ransom module counter attack.