Hi, I have got some masquerading trouble now when I upgraded from 8.0 to 8.1. I have got a main PC as a name server, and 2 other PC's connected to this. Masquerading worked perfectly with DNS and Bind9 in 8.0, but when I upgraded I get these errors when trying to reach the Internet from the other PC's: 1. Command Dig ; <<>> DiG 8.3 <<>> 195.159.1.208 1 ;; res options: init recurs defnam dnsrch ;; res_nsend to server default -- 192.168.100.1: Connection refused 2. Command SuSEfirewall2 Try `iptables -h' or 'iptables --help' for more information. Bad argument `reject_func' 3. rejec_func is: Chain reject_func (1 references) target prot opt source destination REJECT tcp -- anywhere anywhere reject-with tcp-reset REJECT udp -- anywhere anywhere reject-with icmp-port-unreachable REJECT all -- anywhere anywhere reject-with icmp-proto-unreachable - Ping hangs at 56(84) bytes of data - Bind version is bind9-9.1.3-252 Dial-up Internet works fine from the gateway PC, and all PC's can be pinged internally with both IP and host name. SuSEFirewall2 is activated, and FW_MASQUERADE is set to yes, as is IP_FORWARD to yes in /etc/sysconfig/sysctl. Named.conf, zones, /etc/hosts, and /etc/resolv.conf is configured. Can anyone help with this? Regards, Jostein