In other words, centsi, do not allow applications be connected from the Internet (server rights) but only allow them to connect the Internet (access rights).