Thanks, Leon. Will check ip_forward. DNS should be okay (external DNS, server names correctly in /etc/resolve.conf) and all my testing was by direct ip numbers rather than names. Cheers, Denis