In interactive mode, when incoming connections/requests are received, ESET does an initial determination of whether the connection should be allowed, or not, and pops up the GUI as either green (should be safe) or red (likely unwanted). From that GUI pop-up, clicking on "Show advanced options" (bottom-left) displays a "Custom rule" button. Clicking on that button brings up the "Edit rule:" dialog box, pre-populating it with information from the incoming request. However, it appears the dialog box always pre-populates with "Allow", even when the GUI had determined the connection was likely unwanted (i.e., was red). It would be great if the custom rule dialog box would default to "Allow" if the GUI was green, and would default to "Deny" if the GUI was red, instead of always defaulting to "Allow".