Allow what you need, block everything else... Including ransomware.