ipfilter allowing cvs

[dave]

Hello,
    I've got a problem allowing cvs traffic through my firewall. Whenever
the firewall is up i get timeout errors, drop the firewall and everything
works fine. I've got a rule that i would have supposed would have worked, it
passes all traffic from my internal interface to the cvs server, all traffic
external is allowed in, it's the internal interface that governs what can
get to me. If anyone is running a cvs server behind a firewall, note, i'm
using nat, please let me know your setup.
Thanks.
Dave.