> The default setup for Captivator does connection tracking > for in -> out traffic, but doesn't allow new connections to > be established out -> in. whoops! > My own preference would be to put a default allow for inbound. makes sense to me. randy