What sort of filter do I need here? This is a web site that one accesses,
enteres a username and pwd, then gets redirected to an https site. It works
w/o filters on. We are running an http proxy at <private_IP>:8080 and IE is
configured to use that.

The workstation trying to get out is 192.168.21.76 - there is at least
something here from another workstations at x.x.x.67 but I left it all in
because I didn't want to leave out anything necessary.

<sigh>

TIA.

-S-

set filter debug = on
set tcp discard filter debug = 1

************************************************** ****************************
OUTBOUND packet to "Discard"
Protocol Type=(TCP) Protocol Flag=(SYN)
Source Address=(192.168.21.76) Destination Address=(12.145.177.8)
Source Port=(1228) Destination Port=(443)
Source TOS=(Dynamic) Destination TOS=(shttp)
Source Interface=(3) Destination Interface=(1)
Source Circuit=(30683) Destination Circuit=(26309)
Source GroupID=(0) Destination GroupID=(0)


Discard filter rule from "Filters" list
Filter Protocol Type=(IP)
Source Interface Type=(Any) Destination Interface Type=(BOARD)
Source Address=(Any Address) Destination Address=(Any Address)
Source Interface Number=(0) Destination Interface Number=(1)
Source Port Range=(0-0) Destination Port Range=(0-0)
Source TOS=(Reserved) Destination TOS=(Reserved)
Source Group Name=(None) Destination Group Name=(None)
Source Group ID=(0) Destination Group ID=(0)
Source Remote System ID=(None) Destination Remote System ID=(None)
Source Circuit=(0) Destination Circuit=(0)
************************************************** ****************************
Source Address=(168.103.0.1) Destination Address=(192.168.21.67)
Source Interface Number=(1) Destination Interface Number=(3)
Source Port Range=(53-53) Destination Port Range=(1171-1171)
Source TOS=(domain) Destination TOS=(Dynamic)
Source Group Name=(None) Destination Group Name=(None)
Source Group ID=(0) Destination Group ID=(0)
Source Remote System ID=(None) Destination Remote System ID=(None)
Source Circuit=(26309) Destination Circuit=(30683)
************************************************** ****************************


Dynamic rule from "Exceptions" list
Protocol Type=(TCP)
Source Interface Type=(Any) Destination Interface Type=(BOARD)
Source Address=(206.190.44.114) Destination Address=(<Public_IP>)
Source Interface Number=(1) Destination Interface Number=(1)
Source Port Range=(80-80) Destination Port Range=(48921-48921)
Source TOS=(HTTP) Destination TOS=(Dynamic)
Source Group Name=(None) Destination Group Name=(None)
Source Group ID=(0) Destination Group ID=(0)
Source Remote System ID=(None) Destination Remote System ID=(None)
Source Circuit=(26309) Destination Circuit=(26309)
************************************************** ****************************