Ok,

Sorted.

The Nutella client (and most internet software) will use a random available port on the client machine to make an outbound connection to the defined port on the remote machine.

Any replies from teh remote machine will come back to the defined port on the client machine. Therefore only the defined port has to be opened in the firewall (as a destination port going either in or out).

At Guard was bringing up warnings that the app was trying to make an out going connection from various ports on my machine (as it would because of the reasons mentioned above) but did not say that the destination port was the one defined.

Thanks

Rims