Debian Package: 4.5.21.6-1 Shorewall Version: 4.5.21.6 Configuration: one-interface example configs Problem Statement: If rpfilter is set on all interfaces in the interfaces config, no references to the dynamic chain are created and later in the startup, the dynamic chain gets eliminated. Troubleshooting: I believe I've read all the relevant documentation (blacklisting, interfaces, etc.) and if this is an intended feature I don't see that it is documented. I've tried varying my config to make sure that Optimization isn't the cause. I seem to be Doing The Right Thing as far as blacklisting goes (DYNAMIC_BLACKLIST=Yes, BLACKLIST=ALL). I believe I've found the cause and have attached a patch which corrects the issue (usr/shorewall/Shorewall/Misc.pm). Lastly, thanks for all of your time on a great product. ------------------------------------------------------------------------------ Learn Graph Databases - Download FREE O'Reilly Book "Graph Databases" is the definitive new guide to graph databases and their applications. Written by three acclaimed leaders in the field, this first edition is now available. Download your free book today! http://p.sf.net/sfu/NeoTech