Hi All. I thing it is more to SuSEfirewall2 developers. I was just looking at the settings made by SuSEfirewall2 scripts based on my settings in rc.config and I could realize that there are quite big section for dmz, when I have no DMZ set in SuSEfirewall2 rc.config at all. Also looking in iptables LIST it is mentioned, that there is no references to forward_dmz and input_dmz chain at all. So the question is what are that chains for. I thing it is quite easy to check if there is any DMZ set up or not and do not set all that not needed chains by SuSEfirewall2 in "no" case. Just a small tip... Best regards Marcin Gryszczuk