Hi, I've just installed, updated and hardened a minimal 7.2 system. The machine has 2 brand new D-Link DFE-560TX+ 10/100 ethernet NICs installed. The link light on both cards show normal operation, until I boot with START_FW set to "yes" in /etc/rc.config (and after having made the appropriate changes to the firewall.rc.config). Then, as soon as the firewall starts initializing, the link light on the external interface (eth1, in my config) goes out. At that point, the network is effectively down. What I would like to do is essentially block all incoming traffic save for some from some well-known and trusted hosts, and to allow all traffic from the internal network to go out. All my machines have static IPs and are connected through a ISDN router/hub. Everything else on the network has been working fine for months. I'm guessing I'm missing something real simple here. Any help appreciated. Eric