Well outgoing not blocking it is just as bad. Just think send new trojan A new one that nobody like Norton knows about like the 1428 explote. See the problem? I find the danger lerks within personally. From personal experiance I've had way more software on my box trying to get on the web than I care to mention. Like file explorer ! Why? so you can fill up my puter with ads? Zone alarm does not really hook into anything it just handles all the ports. Everything goes threw it or it don't get on the web. Ya that GRC site. take it with a grain of salt. The guy is paranoid. But given time any open port is just waiting for the next script to be written to exploit it. Ya lets not block outgoing. It makes total sence. That's how the 1428 exploit got going and that's why this is flawed logic.