Fixes two problems: a) Thanks to Sean Mathews, the long-standing problem with Proxy ARP and IPSEC is solved. b) The 2.0.0 Documentation claims that the default value of ALL INTERFACES in /etc/shorewall/net is "Yes" -- the code didn''t support that. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net