On 08/17/2010 11:23 PM, JD wrote: >> g > It's strange, but I assume that you start with a promiscuous > filter, and then you add rules to button it up. > I really do not know how these rules are consulted, > and which rule takes precedence . > That is not standard practice no - it is the norm to lock it down completely (deny) and then open up what you need.