1)  On systems running Upstart, shorewall-init cannot reliably secure
    the firewall before interfaces are brought up.

2)  In the tcrules file:

    - SAVE and RESTORE generate fatal compilation errors.
    - '|' and '&' are ignored.

    Corrected in 4.6.2.1.

3)  In the mangle file:

    - '|' and '&' are ignored in MARK ACTIONS.

    Corrected in 4.6.2.1.

4)  The compiler fails to detect the IPv6 Header Match capability when
    LOAD_MODULES_ONLY=No.

    Workaround: Use a capabilities file or set LOAD_MODULES_ONLY=Yes.

    Corrected in 4.6.2.2.

5)  The compiler fails to detect Ipset Match support when the system is
    running a 3.14 Linux Kernel.

    Workaround: Use a capabilities file.

    Corrected in 4.6.2.2.

6)  The compiler fails to detect the Arptables JF capability when
    LOAD_MODULES_ONLY=No.

    Workaround: Use a capabilities file or set LOAD_MODULES_ONLY=Yes.

    Corrected in 4.6.2.2.

7)  The tcfilter manpages fail to mention that BASIC_FILTERS=Yes is
    required to use ipsets in the tcfilters files.

    Corrected in 4.6.2.2.
