Well, telling it to let your web browser to be allowed to connect out to web servers seems a good idea I was under the impression that in a default install, it'd ask you for every program that needs to connect out, or for anyone connecting in, but perhaps you've set it at too high a paranoid level or something, from what I remember when I last used that basic firewall.