While getting the Shorewall dump for previous issue I got some errors # shorewall dump > dump.txt cat: /proc/sys/net/netfilter/nf_conntrack_count: No such file or directory cat: /proc/sys/net/netfilter/nf_conntrack_max: No such file or directory Blogs on the internet explain that it's because I'm using the older IP_CONNTRACK modules instead of the newer NF_CONNTRACK. So, is there any plus in replacing the older with the newer and what's the impact on what's already installed should I choose to do it? Thanks, Costa ------------------------------------------------------------------------------