I am running Debian Sarge and I have just installed iptables following the instructions at http://ipset.netfilter.org/ This documentation does not say whether I need to remove the iptables package provided by Debian, but I would guess this is necessary. It appears the iptables version I downloaded from the ipsets homepage is a newer version of iptables than what is present in Debian Sarge but if I remove the Debian iptables package, I will need to put a dummy package in its place so as not to cause shorewall to be removed. Does the old package need to be removed? thanks