1) On systems running Upstart, shorewall-init cannot reliably secure the firewall before interfaces are brought up. 2) The 'enable', 'reenable' and 'disable' commands do not work correctly in configurations with USE_DEFAULT_RT=No and optional providers listed in the DUPLICATE column. 3) Shorewall6-lite fails to start under systemd. Workaround: - Edit /lib/systemd/system/shorewall6-lite.service and correct the ExecStart line: "/sbin/shorewal" should be "/sbin/shorewall" - Run "systemctl daemon-reload" Corrected in 5.1.0.1 4) The PAGER setting in shorewall[6].conf is not propogated to remote firewalls by the 'export', 'remote-start', 'remote-reload' and 'remote-restart' commands. Workaround: Define PAGER in /etc/shorewall[6]-lite/shorewall[6]-lite.conf. Corrected in 5.1.0.1 5) The output of 'shorewall show macros' is garbled in version 5.1.0. Corrected in 5.1.0.1