Hi, I have got some masquerading trouble now when I upgraded from 8.0 to 8.1. I have got a main PC as a name server, and 2 other PC's connected to this. Masquerading worked perfectly with DNS and Bind9 in 8.0, but when I upgraded I get these errors when trying to reach the Internet from the other PC's: 1. Command 'Dig 195.159.1.208' ; <<>> DiG 8.3 <<>> 195.159.1.208 1 ;; res options: init recurs defnam dnsrch ;; res_nsend to server default -- 192.168.100.1: Connection refused 2. Command 'SuSEfirewall2' Try `iptables -h' or 'iptables --help' for more information. Bad argument `reject_func' 3. From command 'iptables -L' reject_func is: Chain reject_func (1 references) target prot opt source destination REJECT tcp -- anywhere anywhere reject-with tcp-reset REJECT udp -- anywhere anywhere reject-with icmp-port-unreachable REJECT all -- anywhere anywhere reject-with icmp-proto-unreachable - Ping hangs at 56(84) bytes of data - Bind version is bind9-9.1.3-252 Dial-up Internet works fine from the gateway PC, and all PC's can be pinged internally with both IP and host name. But the connected PC's can't reach the Internet. SuSEFirewall2 is activated, and FW_MASQUERADE is set to yes, as is IP_FORWARD set to yes in /etc/sysconfig/sysctl. named.conf, zones, /etc/hosts, and /etc/resolv.conf is configured. Can anyone help with this? Regards, Jostein