I wanted to block all traffic, but from the device I remotely access the windows machine.
I opened Advanced settings in Windows Defender and after a lot of trial and error with new rules, realised that I that there are additional settings located somewhere else as shown in the picture:
I realised that my remote desktop connection didn't end when I turned on
"Block(default)" setting. But it does break if you tick
"Block All Connections" option.
I wonder, what traffic gets through firewall if
"Block(default)" is enabled? Clearly it lets port 3389 alive.