This is pretty embarassing but I will go ahead and post it so that it is forever archived under the "silly noobs on routers" directory. 1. I've been too lazy to get the roaring penguin dsl client working on my routerbox. Historically, I've had trouble with making the right data packet sizes and providing headroom for packet headers, etc. 2. So, I'm still using a simple $50 Netgear cable/dsl router to act as my LAN's DHCP server. 3. The LAN diagram looks like: Internet --> Netgear Router --> Linux firewall/router/gateway --> LAN clients. 4. A while back I needed to set up some video conferencing for my boss. I wanted to make sure there were no issues with the Netgear router so I simply turned it into a DMZ that let everything through to the Linux routerbox. 5. Forgetful as I am, I modified the linux firewall back to its original state once the video conferencing was completed, but never turned off the DMZ settings on the Netgear router. That was the entire problem. The netgear was responding and opening ports as it is designed to do while set on DMZ. Long story, short. I tested the linux box on its own with no Netgear in front of it, and then also tested it with the Netgear set up as the DHCP server, but no longer set up as a DMZ. Both tests yielded results of complete stealth. Where's the beer. Mike