Problems Corrected in 2.4.5 1. In previous versions, when the command is ''start'', ''restart'' or ''stop'' then OUTPUT traffic to hosts listed in /etc/shorewall/routestopped is not enabled if ADMINISABSENTMINDED=Yes. That traffic is now enabled independent of the setting of ADMINISABSENTMINDED. 2. Although it was documented that icmp types could be used in the tcrules file, the code did not support it. Thanks to Jorge Molina, that problem is now corrected. 3. In a multi-ISP configuration, fwmark routing rules now have a higher priority than source IP rules. This allows entries in tcrules to be more effective in controlling routing. 4. Previously, not all of the mangle chains were flushed during "shorewall restart". -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key