I'm going to install Shorewall on a Debian stable Linux box. The shorewall version in the stable repositories is 4.6.4.3-2.
Shorewall website suggests to pin apt preferences and force the download of the new Shorewall version from testing repos.
Package: shorewall
Pin: release o=Debian,a=testing
Pin-Priority: 700
Have you ever done something like that and do you think it is safe?