Richard

I just went back and re-read this entire thread at the MARC archives and
after I was done I'm trying to figure out what it is you're trying to
accomplish.  It appears that you have already developed a set of rules
that protects your system, what are you're concerns regarding port 500?

Are connection attempts to port 500 from the outside world keeping your
connection live?