Here it is misbehaving again. Here is the diff. Is this useful? 33c33,51 < 1 RETURN all -- 0.0.0.0/0 0.0.0.0/0 --- > 1 REJECT all -- x 0.0.0.0/0 reject-with icmp-port-unreachable > 2 REJECT all -- x 0.0.0.0/0 reject-with icmp-port-unreachable > 3 REJECT all -- x 0.0.0.0/0 reject-with icmp-port-unreachable > 4 REJECT all -- x 0.0.0.0/0 reject-with icmp-port-unreachable > 5 REJECT all -- x 0.0.0.0/0 reject-with icmp-port-unreachable > 6 REJECT all -- x 0.0.0.0/0 reject-with icmp-port-unreachable > 7 REJECT all -- x 0.0.0.0/0 reject-with icmp-port-unreachable > 8 REJECT all -- x 0.0.0.0/0 reject-with icmp-port-unreachable > 9 REJECT all -- x 0.0.0.0/0 reject-with icmp-port-unreachable > 10 REJECT all -- x 0.0.0.0/0 reject-with icmp-port-unreachable > 11 REJECT all -- x 0.0.0.0/0 reject-with icmp-port-unreachable > 12 REJECT all -- x 0.0.0.0/0 reject-with icmp-port-unreachable > 13 REJECT all -- x 0.0.0.0/0 reject-with icmp-port-unreachable > 14 REJECT all -- x 0.0.0.0/0 reject-with icmp-port-unreachable > 15 REJECT all -- x 0.0.0.0/0 reject-with icmp-port-unreachable > 16 REJECT all -- x 0.0.0.0/0 reject-with icmp-port-unreachable > 17 REJECT all -- x 0.0.0.0/0 reject-with icmp-port-unreachable > 18 REJECT all -- x 0.0.0.0/0 reject-with icmp-port-unreachable > 19 RETURN all -- 0.0.0.0/0 0.0.0.0/0 127c145 < 2 zone-trusted all -- x 0.0.0.0/0 --- > 2 zone-trusted all -- x 0.0.0.0/0 129c147 < 4 zone-trusted all -- x 0.0.0.0/0 --- > 4 zone-trusted all -- x 0.0.0.0/0 131c149 < 6 zone-trusted all -- x 0.0.0.0/0 --- > 6 zone-trusted all -- x 0.0.0.0/0 133,137c151,157 < 8 zone-trusted all -- x 0.0.0.0/0 < 9 zone-trusted all -- x 0.0.0.0/0 < 10 zone-trusted all -- x 0.0.0.0/0 < 11 zone-trusted all -- x 0.0.0.0/0 < 12 zone-trusted all -- x 0.0.0.0/0 --- > 8 zone-trusted all -- x 0.0.0.0/0 > 9 zone-trusted all -- x 0.0.0.0/0 > 10 zone-trusted all -- x 0.0.0.0/0 > 11 zone-trusted all -- x 0.0.0.0/0 > 12 zone-trusted all -- x 0.0.0.0/0 > 13 zone-trusted all -- x 0.0.0.0/0 > 14 zone-trusted all -- x 0.0.0.0/0 366c386 < Chain zone-trusted (13 references) --- > Chain zone-trusted (15 references)