Silent Mode disabled, temporary rules still being created?

On a fresh Mavericks install, and I've noticed that LS is now blocking ALL new connection attempts by installing a "deny connections" rule filled in with the specific hostname, port, and protocol of the connection attempt that is valid until login.

A browsing of the help files indicated that this kind of behavior might be a Silent Mode issue, but silent mode is off. Any idea what else might cause the creation of these temporary rules?

Thanks!