Never add rules to the All_Code group at the Machine level; always add them to a Zone or another sub-group under Zones.

• 永远不要向Machine级别的All_Code组添加规则;应始终将其添加到Zone或Zone下的其他子组。