Is this still an issue? The hotplug functionality was completely replaced by udev, which is now started at S10 and thus before shorewall. -- shorewall startup needs to be modified. https://launchpad.net/bugs/4820