>> However, I can telnet to www.xxx.yyy.hhh 443. What's wrong with the >> rules? > > from other machine? from localhost ? >From other machines. mark