Just might answer it myself for others that use the search function here:-)
Esmith uses the runlevel 7. 
so 
/etc/rc7.d has all links to programs it runs. 
It runs iptables there and also masq.
These are softlinks to a  general esmith script:
/etc/rc.d/init.d/e-smith-service
this runs things depending on:
/home/e-smith/configuration
You can see what this amounts to by doing
iptables -L 
and iptables -t nat -L
I would built my own script and pass it here shortly, because I do not like others' scripts. 
greetings
hc