David, May be very obvious, but in /etc/rc.d/rc3.d (or whatever your default runlevel is) check the symlink to iptables and make sure it looks something like S??iptables, where ?? are numbers. -- Chat ya later, John. -- BOFH excuse #125: we just switched to Sprint.