Comment 12 for bug 1511869

On further inspection, the reload command in 4.6.4.3 is clearly not doing what the manpage is saying on shorewall which I will put down to not being shorewall 5.X, pre-5.X reload appears to be a reload of a remote host which was moved to a separate command (remote-restart) in 5.X

So yes, is should be:

ExecReload=/sbin/shorewall $OPTIONS restart $RESTARTOPTIONS

Quick discussion with Shorewall people says that a Shorewall-init script should close the firewall prior to networking but that this is unreliable in Ubuntu due to the favour of upstart scripts.

Having a look around to see if there is an init script locking up the firewall before networking now.