I really appreciate your efforts. But it seems you don't pickup my comment : the build reproductible problem is fixed upstream, so no need to have a perticular home made patch. See shorewall annouce for 5.1.5.1 2) Previously, maintainers could not create reproducable packages because the 'configure' and 'configure.pl' scripts inserted the current date and time into the generated shorewallrc file. To support reproducable package builds, the scripts now recognize the SOURCE_DATE_EPOCH environmental variable.

As I said previously there's then 5.1.5.2 also which contain an important fix for shorewall.conf update (this one need a bug report, as it impact the Leap 42.3 package).