As Erich pointed out, it seems to not load the module during boot. (That's again on a fresh system without a configdb.lrp)
firewall# shorewall show capabilities | grep -i tcpmss TCPMSS Match (TCPMSS_MATCH): Not available TCPMSS Target (TCPMSS_TARGET): Not available firewall# mount_modules firewall# shorewall show capabilities | grep -i tcpmss TCPMSS Match (TCPMSS_MATCH): Available TCPMSS Target (TCPMSS_TARGET): Available firewall# ------------------------------------------------------------------------------ ------------------------------------------------------------------------ leaf-user mailing list: leaf-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/leaf-user Support Request -- http://leaf-project.org/