1)  On systems running Upstart, shorewall-init cannot reliably secure
    the firewall before interfaces are brought up.

2)  The 'enable', 'reenable' and 'disable' commands do not work
    correctly in configurations with USE_DEFAULT_RT=No.

1)  In 5.0.7, use of an inline match in a rule that generats multiple
    ip[6]tables rules causes only the first generated rule to contain
    the inline match.

    Fixed in 5.0.7.1.

2)  In 5.0.7, if ':R' is specified with the DIVERT action, an error
    message is erroneously generated.

    Workaround: Remove ':R' -- the real PREROUTING chain is the default
    		for DIVERT.

    Fixed in 5.0.7.1.
