If you are using interactive mode, the firewall can display a learning dialog when it detects a rawsocket attempting to access the network in a way that is not covered by any existing rule.
If you are using interactive mode and this option is not selected, rawsockets are blocked from accessing the network.
To enable rawsocket learning dialogs:
For information about the Home page, see About the Home page.