http://www1.shorewall.net/pub/shorewall/3.0/shorewall-3.0.6/ ftp://ftp1.shorewall.net/pub/shorewall/3.0/shorewall-3.0.6/ Coming soon to a Mirror near you. Problems corrected in 3.0.6 1) A typo in the output of "help drop" has been corrected. 2) Previously, ''shorewall start'' would fail in the presence of a network interface named ''inet''. 3) A shell syntax error was reported when duplicate policies appeared in /etc/shorewall/policy. 4) The iptable_nat and iptable_mangle modules were previously omitted from /etc/shorewall/modules. 5) If you use SAME or SAME:nodst in the ADDRESS column of /etc/shorewall/masq and if you set ADD_SNAT_ALIASES=Yes in shorewall.conf, then "shorewall start" will fail with the error ''Error: an inet prefix is expected rather than "SAME".''. 6) Previously, the ''routeback'' option was ignored in an entry in the /etc/shorewall/hosts file that referred to a (set of) bridge port(s). Example: dmz xenbr0:vif+ routeback Other changes in 3.0.6 1) A ''refreshed'' extension script has been added -- it is executed after "shorewall refresh" has finished. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key