I used to have a filter exception in BM3.6 which allowed a couple
machines which didn't run client trust to skate by the proxy server. I
can't seem to get this to work in 3.8. basically I would allow

Source: Private
All Circuits
10.x.x.x

Destination: Public
All Circuits
Any Address


I created a Packet Type called

NAME: Misc TCPIP
PROTOCOL: IP
SOURCE PORTS:
DEST PORTS:
ACK FILTERING:
STATEFUL FILTERING: ENABLED


Any clue as to why this shouldn't work in 3.8? I tried as closley as
possible to duplicate what was happening in the old BM server.