Shorewall 3.4.7 is now available. Problems Corrected in Shorewall 3.4.7 1) A bug prevented proper handling of PREROUTING marks when HIGH_ROUTE_MARKS=No and the track option was specified in /etc/shorewall/providers. 2) Previously, if the following sequence of routing rules was specified, then the first rule would always be omitted. #SOURCE DEST PROVIDER PRIORITY $SRC_A $DESTIP1 ISP1 1000 $SRC_A $DESTIP2 SOMEISP 1000 $SRC_A - ISP2 1000 The reason for this omission was that Shorewall uses a delete-before-add approach and attempting to delete the third rule resulted in the deletion of the first one instead. This problem occurred with both compilers. 3) When using Shorewall-shell, provider numbers were not recognized in the PROVIDER column of /etc/shorewall/route_rules. -Roberto and Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key ------------------------------------------------------------------------- This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2005. http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/