diff --git a/Shorewall2/changelog.txt b/Shorewall2/changelog.txt
index ebf3a0651..b43e0a97c 100644
--- a/Shorewall2/changelog.txt
+++ b/Shorewall2/changelog.txt
@@ -205,3 +205,4 @@ Changes since 2.0.3
 
 100) Reconcile ipsec masq file implementation with the documentation.
 
+101) Add netfilter module display to status output.
diff --git a/Shorewall2/releasenotes.txt b/Shorewall2/releasenotes.txt
index 2ac06cc77..740ab9466 100755
--- a/Shorewall2/releasenotes.txt
+++ b/Shorewall2/releasenotes.txt
@@ -882,3 +882,6 @@ New Features:
     previous versions of Shorewall (and OpenVPN), the default port was
     5000 but has been changed to 1194 to conform to the new OpenVPN
     default.
+
+40) The output of "shorewall status" now lists the loaded netfilter
+    kernel modules.
diff --git a/Shorewall2/shorewall b/Shorewall2/shorewall
index 266d8be17..fd1d8ac0c 100755
--- a/Shorewall2/shorewall
+++ b/Shorewall2/shorewall
@@ -1018,6 +1018,13 @@ case "$1" in
 	    echo
 	    ip route ls table $table
 	done
+
+	if qt which lsmod; then
+	    echo
+	    echo "Modules"
+	    echo
+	    lsmod | grep -E '^ip_|^ipt_'
+	fi
 	;;
     hits)
     	[ -n "$debugging" ] && set -x