Turns out that the problem was in my Eclipse instance not syncing correctly between its locally cached workspace -- which I'm editing directly -- and the remote data, which shorewall is acting on/compiling.
In the local instance, everything looks OK. IN the remote, there's a #-comment in front of one of those params. After a force-resync, all's OK again. I.e., PEBKAC. Not shorewall or pkgs. Thanks for the pointer on troubleshooting! I'd not have found this easily. ------------------------------------------------------------------------------ _______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users
