When installing tarball builds on a remote, the installer seems perfectly happy to install ONLY the shorewall-core shorewall-lite shorewall6-lite shorewall-init products. Nothing in the installer output that I've noticed, nor any output of cursory checks of shorewall-lite version etc, indicate that the 'full' shorewall/shorewall6 must be installed. I've noticed, at least on openSUSE, that distro packaging does require prerequisites of shorewall shorewall6 to successfully install shorewall-lite shorewall6-lite What's actually the design-intended dependency set by upstream SW? Does any part of a remote-only install -- products = shorewall-core shorewall-lite shorewall6-lite shorewall-init -- require the install of the full products as well? ------------------------------------------------------------------------------ Meet PCI DSS 3.0 Compliance Requirements with EventLog Analyzer Achieve PCI DSS 3.0 Compliant Status with Out-of-the-box PCI DSS Reports Are you Audit-Ready for PCI DSS 3.0 Compliance? Download White paper Comply to PCI DSS 3.0 Requirement 10 and 11.5 with EventLog Analyzer http://pubads.g.doubleclick.net/gampad/clk?id=154622311&iu=/4140/ostg.clktrk