Opinions on rules

[Edward Ingram]

In our company, we have about 40-50 users...many who run apps like AIM, ICQ, IRC, as well as lots of proprietary company software that requires the use of non registered ports.  Since we don't really have a policy on users running messenger apps and such, and I really could care less right now, would it be safe to have an initial rule that allows all inside connections to the outside and to allow all established connections back in?  That would save a lot of trouble vs. specifically allowing certain ports out and blocking everything else. Ed