Actually, there's something not quite right here! I didn't realise, at first, that you could still connect, even though fx was blocked. So, having now played with things, bearing in mind that problem, it does seem like Avast is making a hole in the firewall with it's web shield. as soon as that's disabled, things work as they should. Curious!