1) On systems running Upstart, shorewall-init cannot reliably secure the firewall before interfaces are brought up. 2) The 'enable', 'reenable' and 'disable' commands do not work correctly in configurations with USE_DEFAULT_RT=No and optional providers listed in the DUPLICATE column. 3) Shorewall6-lite fails to start under systemd. Workaround: - Edit /lib/systemd/system/shorewall6-lite.service and correct the ExecStart line: "/sbin/shorewal" should be "/sbin/shorewall" - Run "systemctl daemon-reload" Will be corrected in 5.1.0.1