Thanks pablo appreciate the response, I have tried to use the permiter
routing example, but im still getting an exception when it trys to route

"System.InvalidOperationException: Security requirements are not satisfied
because the security header is not present in the incoming message."

in my router I have 2 policies, one for the incomming request and one for
the forwarded request.

I have created my own soaprouter, with some diagnostics, I see it gets
through the constructor and the getrequest but never makes it to
GetForwardRequestPolicy.  I believe its getting blocked on the router policy,
but cant seem to figure out why...

   public class MessageRouter : SoapHttpRouter
   {
       public MessageRouter()
           : base()
       {
           EventLog.WriteEntry("router", "constructor",
EventLogEntryType.Information);
       }

       
       /// <summary>
       /// Returns a WSE policy to be used between the router and the service
       /// </summary>
       /// <returns></returns>
       protected override Policy GetForwardRequestPolicy()
       {
           EventLog.WriteEntry("router", "forward",
EventLogEntryType.Information);

           PolicyConfiguration configuration =
WebServicesConfiguration.PolicyConfiguration;
           Policies policies = configuration.GetPolicies();
           Policy policy = policies["forward"];

           return policy;
       }

       /// <summary>
       /// Returns a WSE policy to be used between the client and the router
       /// </summary>
       protected override Policy GetRequestPolicy()
       {
           EventLog.WriteEntry("router", "request",
EventLogEntryType.Information);

           // Lookup in the configuration for the policy
           PolicyConfiguration configuration =
WebServicesConfiguration.PolicyConfiguration;
           Policies policies = configuration.GetPolicies();
           Policy policy = policies["request"];
           EventLog.WriteEntry("router", "request end",
EventLogEntryType.Information);

           return policy;
       }