Some firewalls have a reserved ip list that is out of date I some times have to lookup the ip address of asite andcheck my iptables script to see if that addres is reserved; if yes, remove from list hth rfjones