Early adopters have found a couple of problems in 3.4.0. The sub-directories mentioned below may be found under http://www1.shorewall.net/pub/shorewall/3.4/shorewall-3.4.0/. 1) The fix for clearing proxy arp that was included in Shorewall 3.4.0 was incomplete. To apply the rest of the fix, either: a) Replace /usr/share/shorewall/compiler with the ''compiler'' file from the errata/Shorewall sub-directory. or b) Patch /usr/share/shorewall/compiler with the ''patch-3.4.0-1.diff'' file from the errata/patches sub-directory. 2) If a log-prefix exceeds 29 characters, ''shorewall restart'' fails with ''truncate: command not found'' and a possible segmentation fault in iptables. Either: a) Replace /usr/share/shorewall/lib.base and /usr/share/shorewall/lib.config with the ''lib.base'' and ''lib.config'' files from the errata/Shorewall sub-directory. or b) Patch /usr/share/shorewall/lib.base and /usr/share/shorewall/lib.config with the ''patch-3.4.0-2.diff'' file from the errata/patches sub-directory. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key ------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net''s Techsay panel and you''ll get the chance to share your opinions on IT & business topics through brief surveys-and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV