The only platform that doesn't tend to is Windows? I believe that is correct. It is an obscure thing to even consider and prone to blocking legit systems but

The only platform that doesn't tend to is Windows? I believe that is correct. It is an obscure thing to even consider and prone to blocking legit systems but useful if one has Ansible scripts to enable "Threatcon Alpha" so to speak when under an attack and even then I only use that on specific ports. It's less common these days for any of my nodes to take on attacks as I mostly share my unpopular opinions here now. Another Windows vs Linux/Mac default is the packet TTL. Linux/Mac/BSD is 64 and Windows is 128. This is only useful in TCP as it decrements in UDP but useful to see some bots that set really high TTL's. There is an IPTables module to make decisions based on TTL.