OK, so just because I see eth0 and 192.168.4.1 (eth1) in the message doesn't mean the problem is on the firewall: it's likely coming from another device on the eth1 LAN.
I figure it's the $5 combo card on the w98 box, so I've reconfigured it to use 10Base2 media instead of auto-sensing, the default. (Donald Becker had mentioned on the vortex mailing list that auto-sensing 10Base2 is not reliable, so some drivers spew out garbage in an effort to detect it. Maybe that's what I'm seeing....) Thanks for the help! Tod

