[Phayder]

Hi guys.
I recently bump into a problem:
X11 traffic is not passing the firewall if is not explicitly defined.
I other words, if I have a rule like this:
Source x.x.x.x Destination y.y.y.y Service any
the X11 traffic is not passing the firewall, unless is defined in a rule.
Source x.x.x.x Destination y.y.y.y Service X11.
The rule must be place above any other rule that permit service any, so no
conflict will appear.
So basicly, the X11 connection is in fact "Accepted" by the Rule Base, but is later rejected by another mechanism (called the Session Handler), which does not have any information about rule numbers.

Regards,
Phayder