Surf Soho MK3 Inbound Firewall

I know that the default Inbound Firewall has been discussed ad nauseam, but the way the default rule is written is so confusing that I’d like to confirm that the default “any any allow” rule actually does NOT allow any unsolicited incoming traffic. Am I correct?
Thank you in advance.

You are correct.

Thank you!