diff --git a/docs/standalone.xml b/docs/standalone.xml
index 3705a2281..274443559 100644
--- a/docs/standalone.xml
+++ b/docs/standalone.xml
@@ -577,6 +577,23 @@ SSH(ACCEPT) net $FW
other connections as desired.
+
+ Disabling your existing Firewall
+
+ Before starting Shorewall for the first time, it's a good idea to
+ stop your existing firewall. On Redhat/CentOS/Fedora:
+
+ service iptables stop
+
+ If you are running SuSE, use Yast or Yast2 to stop
+ SuSEFirewall.
+
+ Once you have Shorewall running to your satisfaction, you should
+ totally disable your existing firewall. On /Redhat/CentOS/Fedora:
+
+ chkconfig --del iptables
+
+
Starting and Stopping Your Firewall
diff --git a/docs/three-interface.xml b/docs/three-interface.xml
index 32ee8d93c..416bf8430 100644
--- a/docs/three-interface.xml
+++ b/docs/three-interface.xml
@@ -1092,6 +1092,23 @@ ACCEPT net $FW tcp 80
+
+ Disabling your existing Firewall
+
+ Before starting Shorewall for the first time, it's a good idea to
+ stop your existing firewall. On Redhat/CentOS/Fedora:
+
+ service iptables stop
+
+ If you are running SuSE, use Yast or Yast2 to stop
+ SuSEFirewall.
+
+ Once you have Shorewall running to your satisfaction, you should
+ totally disable your existing firewall. On /Redhat/CentOS/Fedora:
+
+ chkconfig --del iptables
+
+
Starting and Stopping Your Firewall
diff --git a/docs/two-interface.xml b/docs/two-interface.xml
index 670d5798b..5c33da7dc 100644
--- a/docs/two-interface.xml
+++ b/docs/two-interface.xml
@@ -1012,6 +1012,23 @@ ACCEPT loc $FW tcp 80 #Allow Weblet to work
+
+ Disabling your existing Firewall
+
+ Before starting Shorewall for the first time, it's a good idea to
+ stop your existing firewall. On Redhat/CentOS/Fedora:
+
+ service iptables stop
+
+ If you are running SuSE, use Yast or Yast2 to stop
+ SuSEFirewall.
+
+ Once you have Shorewall running to your satisfaction, you should
+ totally disable your existing firewall. On /Redhat/CentOS/Fedora:
+
+ chkconfig --del iptables
+
+
Starting and Stopping Your Firewall