> > but why when I don't have the rule, I have no problem ??? I would guess that it DOESNT try to verify the Reverese of the connecting host.