I had installed new kernel 2.6.16.5 on Debian knoppix with all IP Tables kernel options enabled.

I use: Shorewall 3.0.6, IPTables: 1.3.5

Everything is ok, except TCPFlags option at /etc/shorewall/interfaces:

#ZONEINTERFACEBROADCASTOPTIONS
#net eth0 detectnorfc1918,routefilter,dhcp,logmartians,nosmu rfs,blacklist
net eth0 detect norfc1918,routefilter,dhcp,logmartians,nosmurfs,bl acklist,tcpflags

If I delete tcpflags, the shorewall started succesfully.

If I use tcpflag options:

(from trace / debug output):

+ run_iptables -A logflags -j REJECT --reject-with tcp-reset
+ '[' -n '' ']'
+ '[' -n Yes ']'
+ '[' -f /tmp/shorewall.SaCWSI/iprange ']'
+ /sbin/iptables -A logflags -j REJECT --reject-with tcp-reset
iptables: Unknown error 4294967295
+ '[' -z '' ']'
+ error_message 'ERROR: Command "/sbin/iptables -A' logflags -j REJECT --reject-with 'tcp-reset" Failed'
+ echo ' ERROR: Command "/sbin/iptables -A' logflags -j REJECT --reject-with 'tcp-reset" Failed'
ERROR: Command "/sbin/iptables -A logflags -j REJECT --reject-with tcp-reset" Failed
+ stop_firewall
+ '[' -n /var/lib/shorewall/shorewall.JIpwiX ']'
+ rm -f /var/lib/shorewall/shorewall.JIpwiX
+ set +x

How to solve this problem?
Thank you