My firewall script was generated by guarddog, with realplayer enabled. In the past I have had to add manual guarddog entries to handle realplayer sites with odd DST addresses,
^^^^^^^^^^^^^^^^^ Correction, that should be "odd destination ports". but they used a single destination port, or
narrow range of ports.