I was just going to give up , and I even installed shorewall, when my last attempt with my very old iptables config (from redhat 7.2) did work. I of course to still get rid of stupid systemd config, but I don't really care since my server is allways up!. Thank you anyway for your hints. Jacques