[FW1] outbound client auth taking effect inbound also.

[Kreep <kreep@mediaone.net>]

    [ Part 1, Text/PLAIN (charset: ISO-8859-1 "Latin 1")  20 lines. ]
    [ Unable to print this part. ]

    [ The following text is in the "iso-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set. Some ]
    [ characters may be displayed incorrectly. ]


I have a rule like this:

users--------------->any-------------------->group_of_services-----------------
-->client_auth

The problem is this: If a connection is attempted from outside the
firewall to one of my statically translated internal hosts for any of the
group_of_services, the firewall prompts for client auth, whether the
internal host is providing one of the group_of_services or not.

I intended this rule to be in effect only for internal users trying to
access external services, but it is applied no matter whether the
connection is outbound or inboud.

Anybody have any ideas on how to remedy this?

Thanks ,

kreep@mediaone.net