Just might answer it myself for others that use the search function here:-)
Esmith uses the runlevel 7.
so
/etc/rc7.d has all links to programs it runs.
It runs iptables there and also masq.
These are softlinks to a general esmith script:
/etc/rc.d/init.d/e-smith-service
this runs things depending on:
/home/e-smith/configuration
You can see what this amounts to by doing
iptables -L
and iptables -t nat -L
I would built my own script and pass it here shortly, because I do not like others' scripts.
greetings
hc