Thinking laterally, is there no other way to accomplish your task than the current way? Also, could there be a bug somewhere? Have you tried Smoothwall? I prefer smoothwall. Then there is also ClarkeConnect. ClarkConnect is a bit more intensive thatn Ipcop and Smoothwall. However everything is integrated so its basically point and click.