This RC corrects a couple of problems in RC1 and or earlier releases. You may download from: http://www.shorewall.net/pub/shorewall/development/4.4/shorewall-4.4.7-RC2 ftp://ftp.shorewall.net/pub/shorewall/development/4.4/shorewall-4.4.7-RC2 Problems corrected in this RC: 1. When optimization 4 was enabled (OPTIMIZE = 4, 5, 6 or 7), then iptables-restore failed under the following circumstances.: a) There is a zone defined in /etc/shorewall/hosts with a network address other than 0.0.0.0/0. b) There is a DNAT or REDIRECT rule that specifies an IP address (host or network) in the SOURCE column. 2. Under the following conditions, a Perl run-time diagnostic is issued: - Optimization 2 is enabled - An interface is associated with a single zone Z - The interface is described with an option such as ''dhcp'' that requires netfilter rules - The Z->fw or fw->Z policy is ACCEPT In addition to causing the diagnostic, this set of circumstances causes the rules implementing the option(s) to be omitted from the generated ruleset. 3. Previously, the ''nosmurfs'' option was ignored in IPv6 compilations. As part of this fix, ''nosmurfs'' handling when SMURF_LOG_LEVEL is specified has been improved for both IPv4 and IPv6 and the ''smurfs'' chain is no longer created and populated when there are no ''nosmurfs'' interfaces or networks. -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________ ------------------------------------------------------------------------------ The Planet: dedicated and managed hosting, cloud storage, colocation Stay online with enterprise data centers and the best network in the business Choose flexible plans and management services without long-term contracts Personal 24x7 support from experience hosting pros just a phone call away. http://p.sf.net/sfu/theplanet-com