> You need "options IPFIREWALL" too. > Seems you don't have IPFIREWALL compiled into kernel. this worked. 00500 0 0 fwd tablearg,5222 tcp from any to me6 dst-port 15222 00600 0 0 fwd tablearg,5223 tcp from any to me6 dst-port 15223 so it is all in the kernel or all in the module, not half and half. <doh>. thank you. randy