feature #3175: Add a default SG rule to allow outbound connections for every protocol