1) On systems running Upstart, shorewall-init cannot reliably secure the firewall before interfaces are brought up. 2) The 'enable', 'reenable' and 'disable' commands do not work correctly in configurations with USE_DEFAULT_RT=No. 3) Two defects have been discovered in the implementation of new TRACK_RULES=File feature. Both manifest themselves as a compiler assertion failure and occur regardless of the setting of TRACK_RULES. Conditions which expose the defects are: a) Entries in the ecn file. b) The allowBcast action is invoked with a log level specified. Both are corrected in Shorewall 5.0.5.1.