The following sections describe how to configure exceptions using FILTCFG to allow specific IP services through the Novell® BorderManager® 3.8 firewall when the action of the filters is to deny packets in the filter list. A server SET command to filter packets that have IP header options is also described.