-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 http://shorewall.net/pub/shorewall/2.1/shorewall-2.1.6 ftp://shorewall.net/pub/shorewall/2.1/shorewall-2.1.6 I discovered that some of the policy options such as ''spi'' and ''tunnel-src/dst'' must be specified separately for input and output. I''ve added a couple of more columns to /etc/shorewall/masq. - -Tom - -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFBJ5KMO/MAbZfjDLIRAsm7AJwLK/GSUGknAtCQV63BRGlimvF/xwCfYkgU MSWnQCvWSYoulvztPJg+zJo=KYqx -----END PGP SIGNATURE-----