Actually, no, Terry, that isn't it. The way to get e-smith/SME to use iptables is to wait for the release of 5.6. All prior versions (at least back to 3.x) used ipchains. I forget what the masqing code was called in the 2.0 kernels, but I don't think it was iptables.