Hi, please update net-firewall/shorewall to 4.5.17.1. The latest update from 02.06.2013 introduced a serious bug, when you use the optimizer: > 3) A bug in the optimizer in 4.5.17 can cause 'set' and 'geoip' > matches to be dropped. That has been corrected. http://www1.shorewall.net/pub/shorewall/4.5/shorewall-4.5.17/releasenotes.txt Reproducible: Always
shorewall 4.5.18 was released last week.
Done; Thanks for reporting.