I am just setting up a BM 3.7 sp2 fp3b. I have defined the a rule that

points to an NDS object. This appears to work, I run CLNTRUST on the

worksation and I see that CLNTRUST has handsaked with the BM box. But
if i
then create a rule that allows my workstation's ip address through and

have this rule below the rule with the NDS object. It allows me to
browse
the internet. When it should hit the NDS rule first which is currently
set
to deny.

Leon