http://www1.shorewall.net/pub/shorewall/development/3.4/shorewall-3.4.0-Beta3 ftp://ftp1.shorewall.net/pub/shorewall/development/3.4/shorewall-3.4.0-Beta3 Problems Corrected in 3.4.0 Beta 3 1) Shorewall now supports VLAN interfaces with names of the form vlan@ethX. 2) Previously, "ipp2p:udp" was incorrectly rejected in the PROTO column of an action definition. 3) Previously, if an invalid DISPOSITION was specified in a record in /etc/shorewall/maclist, then a confusing error message would result. Example: /etc/shorewall/mac: ALOW:info eth0 02:0C:03:04:05:06 Error message: ERROR: No hosts on ALOW:info have the maclist option specified The new error message is: ERROR: Invalid DISPOSITION (ALOW:info) in rule "ALOW:info eth0 02:0C:03:04:05:06" Other Changes in 3.4.0 Beta 3 1) Previously, ''ipsecnat'' tunnels allowed AH traffic by default (unless ''isecnat:noah'' was given). Given that AH is incompatible with NAT traversal, ''ipsecnat'' now implies ''ipsecnat:noah''. 2) Shorewall now generates half as many rules as previously in the ''blacklst'' chain when BLACKLIST_LOGLEVEL is specified. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key ------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net''s Techsay panel and you''ll get the chance to share your opinions on IT & business topics through brief surveys - and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV