With version 2.1.9, if DELAYBLACKLISTLOAD=No (or if the option is unspecified), the blacklist is not loaded. You can fix the problem by changing line 5135 in /usr/share/shorewall/firewall from: if [ -n "$DELAYBLACKLISTLOAD" ]; then to if [ -z "$DELAYBLACKLISTLOAD" ]; then -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: signature Url : http://lists.shorewall.net/pipermail/shorewall-devel/attachments/20040923/42db4f1d/attachment.bin