1)  On systems running Upstart, shorewall-init cannot reliably secure
    the firewall before interfaces are brought up.

2)  When one or more chain names are given in a 'reset' command, the
    command fails.

    Corrected in Shorewall 4.6.13.1

3)  The Tinc macro and tinc entries in the tunnels file only enable the
    UDP data connection; they do not enable the TCP meta-connection.

    Corrected in Shorewall 4.6.13.1

4)  If statistical load balancing is used in the providers file, the
    default route in the main table is not deleted during firewall
    firewall start/restart. This prevents providers whose default
    routes were not in the main table from being able to recover from
    the disabled state.

    Corrected in Shorewall 4.6.13.2

