Same for me here. I've had a working shorewall with iptables 1.3.3. Also the command "iptables -p icmp -h" which should list the types of icmp packets failes. Therefore I think this is an iptables problem not related to shorewall at all.
** Bug 66453 has been marked a duplicate of this bug -- macro.AllowICMPs fails on startup https://launchpad.net/bugs/66106 -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs