Ack. Re: Karsten's mail, I get the same IP from host, and the trace stops at that same pbs-gw one. So I try a browser again, which... works. I was certain I'd tried that, but I guess not. So the problem now is that the *masqed* machine can't get to www.pbs.org. Looks like I'll be messing with iptables some more sooner rather than later... Mike McGuire