This is just a role up of the "shorewall refresh" bug fix plus the change that reversed the order of "dhcp" and "rfc1918" filtering. -Tom -- Tom Eastep \ Shorewall - iptables made easy AIM: tmeastep \ http://www.shorewall.net ICQ: #60745924 \ teastep@shorewall.net