On Apr 23, 2006, at 8:54 PM, Steven Harris wrote:

I have a new client with a requirement that a box in the DMZ have no
open ports through the firewall.

"We can do that" I said, and set up the node with
SessionInitiation=serveronly and a defined IP address and port. ...

Steve - That sounds like a contradiction in terms to me.

You can't contact a peer system if there is no port accessibility.
A full exploration of intent and means is needed there before going
on to attempt scheduler execution.

   Richard Sims