Changes since 1.4.4b 1) The command "shorewall debug try " now correctly traces the attempt. 2) The ORIGINAL DEST column in a DNAT[-] or REDIRECT[-] rule may now contain a list of addresses. If the list begins with "!' then the rule will take effect only if the original destination address in the connection request does not match any of the addresses listed.