Rules for determining good vs bad connections#

Memorize a bunch of known ports for common TCP/IP applications
Learn how to use netstat with switches -a -n -o -b to help define what you're looking for
Take the time to learn the ports that run on your OS
Learn processes that normally run on your OS
Search for info on processes you don't recognize
Get rid of bad processes