1)  On systems running Upstart, shorewall-init cannot reliably secure
    the firewall before interfaces are brought up.

2)  When running Perl 5.18.0 or later, two consecutive compilations of
    the same configuration may produce different but equivalent script
    files.

3.  A change introduced in Shorewall 4.6.11 causes the following
    shell diagnostic to appear in the output of 'shorewall[6][-lite]
    show connections'

        /usr/share/shorewall/lib.cli: line 1015: show_connections:
	    command not found

    Corrected in Shorewall 4.6.11.1.

4.  The 'postcompile' extension script is still being executed
    when an 'update' was performed.

    Corrected in Shorewall 4.6.11.1.