1)  On systems running Upstart, shorewall-init cannot reliably secure
    the firewall before interfaces are brought up.

2)  When one or more chain names are given in a 'reset' command, the
    command fails.

    Corrected in Shorewall 4.6.13.1

3)  The Tinc macro and tinc entries in the tunnels file only enable the
    UDP data connection; they do not enable the TCP meta-connection.

    Corrected in Shorewall 4.6.13.1

4)  If statistical load balancing is used in the providers file, the
    default route in the main table is not deleted during firewall
    firewall start/restart. This prevents providers whose default
    routes were not in the main table from being able to recover from
    the disabled state.

    Corrected in Shorewall 4.6.13.2

5)  The compiler flags DROP as an error in the mangle file.

    Corrected in Shorewall 4.6.13.4.