Also applies to computers: no open inbound ports, and outbound only to known destinations.