Dear Tom, I''m encountering a situation that is confounding me. I installed Shorewall v 1.4.6c from the tar ball. Everything seems to work as I would expect re rules, masq, policy etc. except I cannot ping my ''dmz'' from the ''loc'' zone when the computer is started or rebooted. I can ping if I ''restart'', ''stop/start'', ''stop'' or ''clear'' Shorewall. So my routing is ok and my ''stopped'' situation is ok and my rules and policy would seem to be ok on a restart but not on a cold or warm boot. If I need to include any info. from one of the config files I''m happy to do so. TIA John