Hi, I am running RH8 firewalls with iptables 1.2.6a. The firewalls work just fine, but on reboot the nat part doesn't start up. It will not let internal traffic out or external traffic in until I do a restart. I set up ip_forward to 1 in sysctl.conf, and the script I am using loads all necessary modules right at the start. boot.log shows output from the script as starting without error , and there are no errors in the messages or kernel logs either. An iptables -L shows the tables as loaded, and iptables -t nat -L shows that the nat tables are loaded. I use DHCP to the PC's on the internal lan, could this be the problem? It starts after iptables during bootup and I wondered if this could be stopping iptables getting the nat stuff sorted. Thanks, Gillian