I agree, default "Medium" firewall setting is the very first thing I change on a new site.