Fixed with this rule. thaks Jens > pass in quick on $ext_if proto tcp from any to 192.168.0.2 port 3389 > > Hope that helps, > > Jens