Changes since 1.3.12 1. Added 'DNAT-' target. 2. Print policies in 'check' command. 3. Result 255 from /etc/shorewall/tcclear inhibits clearing tc rules.