Shorewall 4.5.21.9 is now available for download. Problems corrected: 1) The output of 'shorewall show capabilities' always showed the 'Recent match --reap option' as 'Not Available'. 'shorewall show -f capabilities' correctly reported the capability. 2) When a rules file section other than NEW began with a ?COMMENT directive, the comment would erroneously appear in the rule which jumps to the section chain as well as in the rules directly related to the following entries. 3) Rule comments were omitted from the compiler's 'trace' output in some cases. 4) When FASTACCEPT=Yes, ESTABLISHED,RELATED accept rules were incorrectly omitted from an interfaces's _in and _fwd chains when 'rpfilter' was specified in the interfaces's entry in /etc/shorewall[6]/interfaces. Thank you for using Shorewall, -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________ ------------------------------------------------------------------------------