Hi, I eventually solved my problem. It was due to a wrong entry in the rules file.
I had something like: $PROVIDER $DEST_IP_ADDR - ${IF_LAN}.111 $PROVIDER $DEST_IP_ADDR - ${IF_LAN}.112 where $PROVIDER, $DEST_IP_ADDR and ${IF_LAN} were the same. The error message was not clear enough, so I wanted to try the trace and debug options in case I encounter more of these misconfigurations in the future. I ran: # shorewall trace check ERROR: Invalid command: trace The man page says: shorewall[6] [trace|debug] [options] [check | ck ] [-e] [-d] [-p] [-r] [-T] [-i] [directory] # shorewall version -a shorewall-core: 5.2.8 shorewall: 5.2.8 shorewall6: 5.2.8 shorewall-init: 5.2.8 Incidentally, I get this output when I run the following: # shorewall debug check ERROR: Invalid command: debug Same message as in my first post. So, are "debug" and "trace" system or Shorewall-specific commands that have not been installed in my OS? Thanks, Vieri _______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users