I recommend that this report be downgraded+tag unreproducible, if someone can report success setting up masquerading via webmin-firewall and iptables 1.2.11-8. Justin