I use Kerio v2.1.5. It is based on Tiny, and works great. By default it's set to require authorization (permit/deny, or make permanent rule) everytime something asks for access. After a few days...