diff --git a/Shorewall/firewall b/Shorewall/firewall
index 88ed68ec7..7566fb57c 100755
--- a/Shorewall/firewall
+++ b/Shorewall/firewall
@@ -6497,9 +6497,9 @@ complete_standard_chain() # $1 = chain, $2 = source zone, $3 = destination zone
 	eval loglevel=\$${policychain}_loglevel
 	eval
 
-	policy_rules $1 $policy NONE $loglevel
+	policy_rules $1 $policy $loglevel
     else
-	policy_rules $1 DROP NONE INFO
+	policy_rules $1 DROP info
     fi
 }
 
diff --git a/Shorewall/releasenotes.txt b/Shorewall/releasenotes.txt
index 52a9ca621..9dbe07d21 100755
--- a/Shorewall/releasenotes.txt
+++ b/Shorewall/releasenotes.txt
@@ -2,7 +2,16 @@ Shorewall 2.5.6.
 
 Problems Corrected in 2.5.6:
 
-None.
+1)  The following fatal error could occur at startup:
+
+    ERROR: Command "/sbin/iptables -A INPUT   -j  LOG  --log-level NONE
+        --log-prefix "Shorewall:INPUT:ACCEPT:"" Failed
+
+    That problem has been corrected.
+
+2)  The Makefile is now unconditionally installed in /etc/shorewall
+    during an upgrade (the prior copy has been saved in
+    /etc/shorewall-<version>.bkout/Makefile).
 
 New Features in 2.5.6: