That's great I'll try these, will have to leave it on unprotected another night though

oh well, it's got nothing on it and mine's safe.
My worry was that ZA was not only stopping the internal network but also all net traffic too, possibly confused by the external USB ADSL modem not being listed in the zones. But the ethernet adapter is defo set to trusted. Hmm.