HI.. I'm having a spot of trouble with our groupwise remote clients.. the
xx.xx.xx.xx is the public address that is NAT'd to an internal address ..
its been okay for ages and I've checked recheckd the filters .. however
evenwith the filters unloaded its not working ... IP routing problem maybe
... or something else?

RECEIVE: pktid:31370> xx.xx.xx.xx tt1:111 (TCP)
TCP:SYN Source Port:1483 Dest Port 1677 sequence no 3664405691 Ack No: 0
Discard Outgoing:cause( Forward FILTER), reason (2)