This sounds logical for LAN users which is why as a non networked single user I can get away with blocking it. There's probably no risk to allowing these connections through CIS anyway, just my partial paranoia thinking that if I don't need 'em then shut 'em down