Hi! Thanks for the follow-up. > What is adsl-setup doing for you? Are you using an internal dsl modem, > or is it external/usb or external/cat5? Especially if you use a > network cable to connect to an external DSL modem, you should be able > to configure your network card directly using ifconfig or > /etc/sysconfig thus getting rid of the need for adsl-setup at all. Ok, thanks! Your suggestion to look directly at the config script allowed the solution to jump out at me. I simply never thought to look at my ppp0 device. I looked into this further and found that the adsl-* scripts, depending on the configuration, actually add some junk to iptables. The file /etc/sysconfig/network-scripts/ppp0 looks something like this: USERCTL=no BOOTPROTO=dialup NAME=DSLppp0 DEVICE=ppp0 TYPE=xDSL ONBOOT=yes PIDFILE=/var/run/pppoe-adsl.pid FIREWALL=MASQUERADE PING=. PPPOE_TIMEOUT=80 LCP_FAILURE=3 LCP_INTERVAL=20 CLAMPMSS=1412 CONNECT_POLL=6 CONNECT_TIMEOUT=60 DEFROUTE=yes SYNCHRONOUS=no ETH=eth0 PROVIDER=DSLppp0 USER=memyselfandi@somewhere PEERDNS=no DEMAND=no If the entry "FIREWALL" is anything other than "NONE", then, when the related script (don't know which one) is invoked at runtime, it "interferes" with the firewall by adding some extra stuff. I didn't realise this before. Once again, by loading with 'iptables-restore /etc/sysconfig/iptables', the extra stuff is not added. That's essentially why my firewall at boot time and the one I really wanted were different. Problem solved! Thank you all so much for your help through this. :-D