There IS a default ipchains entry that refuses connections on 25!