Problems corrected in Shorewall 3.4.3 1) The shorecap program was not loading modules correctly. 2) The CHAIN variable is now set correctly before the ''maclog'' script is invoked. 3) The ''shorewall load'' and ''shorewall reload'' commands redundently re-generated the capabilities file when it resided in the export directory. 4) Setting LOGFILE to the value of a shell variable from the params file now works. 5) The ''shorewall-lite restore'' command can fail with a ''startup not enabled'' error. 6) When ROUTE_FILTER=Yes in shorewall.conf, Shorewall no longer clears the rp_filter flag for all interfaces. 7) When LOG_MARTIANS=Yes in shorewall.conf, Shorewall no longer clears the log_martians flag for all interfaces. 8) The ''shorewall add'' and ''shorewall delete'' commands no longer fail with the message ''ERROR: Only one firewall zone may be defined''. 9) It was previously impossible to disable martian logging. 10) IP addresses (aliases) added by ADD_IP_ALIASES and ADD_SNAT_ALIASES are now correctly deleted when Shorewall stops. 11) The ''shorewall add'' and ''shorewall delete'' commands no longer fail with the error ''Only one firewall zone may be defined''. 12) The special ''detect'' value now works correctly in the ADDRESSES column of /etc/shorewall/masq. Other changes in Shorewall 3.4.3 1) A LOCKFILE option has been added to shorewall.conf. This file is used to serialize updates to the active firewall configuration. If not specified, the defaults are: Shorewall - /var/lib/shorewall/lock Shorewall Lite - /var/lib/shorewall-lite/lock -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key ------------------------------------------------------------------------- This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/