I have plenty more info for full detail, but thump me if this is simple:

Dell 350 (1U Celeron) with dual fxp's
NetBSD 1.6 Release
fxp0 to Internet
fxp1 with 5 vlans to inside
no  nat/ipf enabled (yet)
gateway enabled, kernel is slightly modified GENERIC

- the dell can see everybody just fine, inside and out
- subnets on the vlans can see the other vlans just fine
- none of the vlans can get to the Internet
- traceroutes to the address on the vlans do NOT get ack'd by the dell

does this smell like something obvious?

I put together a different box with -current (as of two weeks ago or so)
and get a similar result though it exhibited some other odd things, but
I'd rather get the dell working first.

Thanks,

peter