1) On systems running Upstart, shorewall-init cannot reliably secure the firewall before interfaces are brought up. 2) If statistical load balancing is used in the providers file, the default route in the main table is not deleted during firewall start/restart/reload. This prevents providers whose default routes were not in the main table from being able to recover from the disabled state. Corrected in Shorewall 5.0.1.1 3) The new "remote_" commands are actually implemented as "remote-" commands (with a hyphen rather than an underscore). Also, the "remote-reload" command is broken. Additionally, the commands did not appear in the help text. Corrected in Shorewall 5.0.1.1