A few bug fixes for the 2.4 series. 1) Updated the bogons file to reflect recent IANA allocations. 2) If you use SAME or SAME:nodst in the ADDRESS column of /etc/shorewall/masq and if you set ADD_SNAT_ALIASES=Yes in shorewall.conf, then "shorewall start" will fail with the error ''Error: an inet prefix is expected rather than "SAME".''. 3) It is now possible to exclude a single source MAC address using !<MAC address>. Previously, a startup error occurred. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key