diff --git a/Shorewall/changelog.txt b/Shorewall/changelog.txt
index 51ea82f60..f37ed96b0 100644
--- a/Shorewall/changelog.txt
+++ b/Shorewall/changelog.txt
@@ -6,6 +6,8 @@ Changes in Shorewall 4.4.20.2
 
 3)  Apply sfilters to INPUT traffic.
 
+4)  Exclude ipsec traffic from sfilter.
+
 Changes in Shorewall 4.4.20.1
 
 1)  Corrected FSF address.
diff --git a/Shorewall/releasenotes.txt b/Shorewall/releasenotes.txt
index 4109ca8a3..317b7c1a3 100644
--- a/Shorewall/releasenotes.txt
+++ b/Shorewall/releasenotes.txt
@@ -28,6 +28,8 @@ VI.   PROBLEMS CORRECTED AND NEW FEATURES IN PRIOR RELEASES
     applied to forwarded traffic. Now it is also applied to traffic
     addressed to the firewall itself.
 
+4)  IPSEC traffic is now (correctly) excluded from sfilter.
+
 4.4.20.1
 
 1)  The address of the Free Software Foundation has been corrected in