There is still something very wonky about the way Shorewall starts up under Debian. We had a power failure this afternoon, and the servers came back up with their firewalls in a safe but basically useless state. Well, actually the servers didn't come back up -- that's another problem I'm going to have to address.