Il moderatore di Sygate (a domanda-come si puo' fare e se

allow tcp 80
allow tcp 21
block all

sia corretto e sufficente
mi ha risposto :

Yes, you can do exactly as you specified above. But the Firewall will automatically do that for you. Just disable 'Act as Server' for most applications, and leave it enabled for those you want to allow port 80 and 21 traffic.

That will do it.

What you are suggesting is to allow Incoming web and ftp traffic to your machine, yes ?

That is different from allowing Outgoing browsing traffic for your own surfing - to remote port 80

Quindi ha ragione Tia86,pero' si puo' anche tentare di evitare di scrivere una Rule con il depennamento di Act As Server per tutte le applicazioni tranne per quelle che vuoi tu su 21 e 80.