Ok, so the data flow is from the perspective of coming into the W0 and out
of the W0.
> Doesn't the permit at the end allow all that is not denied including tcp
> establised sessions?
It should but I always like to explicitly state things.
> If not, what would the appropriate entry be?
permit 0.0.0.0/0 www.xxx.yyy.zzz/nm tcp est
-- Thomas C Kinnen - <tkinnen@ra.lucent.com> <tkinnen@sobhrach.com> [RADIUS Test Engineer] - LUCENT Technologies RABU "All of the opinions stated above are my own and not my employer's, unless they were given to me by my employer" - To unsubscribe, email 'majordomo@livingston.com' with 'unsubscribe portmaster-users' in the body of the message. Searchable list archive: <URL:http://www.livingston.com/Tech/archive/>