Someone on the french list think that:
iptable takes only care of IP ans not domain name cause when de ip changes, port 80, 25, 21, 22.... stay ok. Only the changes we made in iptable goes wrong. 3784 goes stealth cause it was open but only for an ip and not a domain!
We still looking for a solution but we need help
Dave