Hello again. Almost got it finished, but I do not know
which filter exceptions I need to add. They WERE NOT
created during install as this was a new installation.

Looking around, the only list I have found is on Page 170 of
the Installation and Admin guide supplied on the BM38 disk.
It lists 16 exceptions (14 if not supporting legacy VPN).

Does this list look about right?

Why have stateful filters for same protocol for both inbound
and outbound traffic? Shouldn't these be non-stateful??

All help appreciated, Chris.