Thanks for your help Lance and Craig concerning my filters with FTP. I
used ipflt_debug_on and found which port was being blocked. Its
impressive what information you can capture.

However, my NAT is still being blocked (works if I unload ipflt and
filtsrv) and I can't filgure out why. I've captured a "Discard" using
ipflt_debug_on which I have attached.

216.64.207.17:8000 is the site I was trying to NAT to from my pc
(172.16.1.77). Is it TCP port 1072 incoming which is being blocked?
I'm sure my TCP dynamic high ports are allowed (default with BM).

Thanks again.

Guy