Hello, I am running shorewall 3.2.9 and iptables 1.2.11 on a debian sarge with 2.6.8 kernel. When shorewall processes the tcrules file, it stops with the following error:

Setting up TC Rules...
iptables v1.2.11: Unknown arg `--dport'
Try `iptables -h' or 'iptables --help' for more information.
ERROR: Command "/sbin/iptables -t mangle -A tcpre -s 0.0.0.0/0 -d 0.0.0.0/0 --dport 1234 -j MARK --set-mark 1" Failed
Processing /etc/shorewall/stop ...
IP Forwarding Enabled
Processing /etc/shorewall/stopped ...
/sbin/shorewall: line 2307: 7571 Terminated $SHOREWALL_SHELL ${VARDIR}/.restart $debugging restart

I tried to empty the tcrules file and set the rule by running the command:
iptables -t mangle -A tcpre -s 0.0.0.0/0 -d 0.0.0.0/0 --dport 1234 -j MARK --set-mark 1

But again the same error (iptables v1.2.11: Unknown arg `--dport').

HELP please... Thx in advance

Your rule needs a -p protocol parameter before the --dport 1234.

A typical line would be like this

iptables -t nat -A PREROUTING -p tcp -d 75.111.x.x --dport x -j DNAT --to-destination 192.168.x.x(webserver-ip):x

iptables -t nat -A POSTROUTING -p tcp -d 192.168.x.x(lan-webserver-ip) --dport x -j SNAT --to-source 192.168.x.x(firewall-box-lan-ip)

OMG I am so stupid... That worked like a charm, thanks