Lorenzo, In regard to the guarantee of providing a working firewall, I am not sure that such a thing is possible. In any case, a major version upgrade on shorewall almost always required manual intervention from the system administrator. I think that perhaps a message sent to stdout (or perhaps mailed to root, though I can't recall if that is OK under Debian policy) warning in the event of a major version upgrade, would probably be sufficient to close this bug.
Regards, -Roberto -- Roberto C. Sánchez http://people.connexer.com/~roberto http://www.connexer.com
signature.asc
Description: Digital signature