Hi Tom, et. al.
I have tested blacklist for the first time and have found a error with my configuration or a bug.
Following http://www.shorewall.net/FAQ.htm#faq84 I place a blacklist entry against my external interface but Shorewall check gives:
WARNING: The entries in /etc/shorewall/blacklist have been ignored because there are no 'blacklist' interfaces : /etc/shorewall/blacklist (line 15)
Now where my configuration is different to most is my external interface is a bonded pair eth2 & eth5 so I tested adding eth2 blackest entry to interfaces and the warning disappeared.
Should I ignore the warning or should I put in interface entries for all interfaces that make up the bonded interface?