> Just for my edification, what is the point of "keep state" on an > "any-to-any" rule? It's a 'pass out' rule - without the 'keep state' the returning packets wont get back in. -pete.