"Nigel J. Andrews" <nandrews(at)investsystems(dot)co(dot)uk> writes:
> I probably wasn't clear. The rule was a _permit_ from localhost to any remote
> host/port for something that looked like a core Windows service. I never saw
> the network traffic (with tcpdump of course) for the port forwarding until I
> disabled that permit rule, thereby actually tightening the firewall.
[ scratches head... ] That makes no sense at all to me; does it to you?
regards, tom lane