diff --git a/Shorewall/changelog.txt b/Shorewall/changelog.txt
index fda0a973e..56f4ce124 100644
--- a/Shorewall/changelog.txt
+++ b/Shorewall/changelog.txt
@@ -22,6 +22,8 @@ Changes in Shorewall 4.4.12
 
 11) Blacklisting by DEST IP.
 
+12) Fix duplicate rule generation with 'any'.
+
 Changes in Shorewall 4.4.11
 
 1)  Apply patch from Gabriel.
diff --git a/Shorewall/releasenotes.txt b/Shorewall/releasenotes.txt
index 970bfed10..238309574 100644
--- a/Shorewall/releasenotes.txt
+++ b/Shorewall/releasenotes.txt
@@ -253,6 +253,11 @@ I I I.  P R O B L E M S   C O R R E C T E D   I N   T H I S  R E L E A S E
 
     This caused the Makefile to be omitted from RPMs as well.
 
+6)  When 'any' was used in the SOURCE column, a duplicate rule was
+    generated in all "fw2*" ("fw-* if ZONE2ZONE="-"). If 'any' was used
+    in the DEST column, then a duplicate rule appeared in all "*2fw"
+    (*-fw) chains.
+
 ----------------------------------------------------------------------------
            I V.  K N O W N   P R O B L E M S   R E M A I N I N G
 ----------------------------------------------------------------------------