1) On systems running Upstart, shorewall-init cannot reliably secure the firewall before interfaces are brought up. 2) The 'enable', 'reenable' and 'disable' commands do not work correctly in configurations with USE_DEFAULT_RT=No and optional providers listed in the DUPLICATE column. 3) Beginning with Shorerwall 5.0.7, calling the 'shorewall' function from embedded Perl results in a syntax error. Workaround: Preface your embedded Perl with: use Shorewall::Config(shorewall); Example: ?BEGIN PERL use Shorewall::Config(shorewall); my $i_count = 1; foreach my $iface (qw/lan1 lan2 lan3 lan4/) { # rules: ACTION CHAIN SOURCE DESTINATION shorewall("acct_in_$i_count - $iface -"); $i_count++; } 1; ?END PERL