This is a roll up of the following fixes: * There is an updated rfc1918 file that reflects the resent allocation of 222.0.0.0/8 and 223.0.0.0/8. * The documentation for the routestopped file claimed that a comma-separated list could appear in the second column while the code only supported a single host or network address. * Log messages produced by ''logunclean'', ''dropunclean'' and ''LOGNEWNOTSYN'' were not rate-limited. * 802.11b devices with names of the form wlan<n> don''t support the ''maclist'' interface option. * Log messages generated by RFC 1918 filtering are not rate limited. * The firewall fails to start in the case where you have "eth0 eth1" in /etc/shorewall/masq and the default route is through eth1 The code is available from www.shorewall.net and ftp.shorewall.net and will be available at SourceForge as soon as sf.net is back on line. -Tom -- Tom Eastep \ Shorewall - iptables made easy Shoreline, \ http://www.shorewall.net Washington USA \ teastep@shorewall.net