1)  On systems running Upstart, shorewall-init cannot reliably secure
    the firewall before interfaces are brought up.

2)  The SetEvent and ResetEvent actions currently set/reset the named
    event even if the packet does not match the other specified
    columns.

3)  The 'show capabilities' command ignores the HELPERS setting. This
    results in unwanted modules being autoloaded and, when the -f
    option is given, an incorrect capabilities file is generated.