> It looks like 'received-on' would be a cleaner and shorter way to > achieve my goal by allowing me to specify inbound and outbound > interfaces in the same rule. >
I think I spoke to quickly; it would be an alternative way, but not a shorter one as I would still need the initial "pass in lab01" I guess. I just wouldn't have to tag it. >