I had to patch the shorewall compiler (3.2.6) with: --- /usr/share/shorewall/compiler 2007-04-09 09:06:10.000000000 -0400 +++ /tmp/compiler 2007-04-09 09:06:08.000000000 -0400 @@ -1618,6 +1618,7 @@ run_iptables -t $MACLIST_TABLE -A $chain -s \$address -d 224.0.0.0/4 -j RETURN done +CHAIN=$chain __EOF__ fi To have maclog working with shorewall-lite. Cheers, b. -- My other computer is your Microsoft Windows server. Brian J. Murrell ------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net''s Techsay panel and you''ll get the chance to share your opinions on IT & business topics through brief surveys-and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV