diff --git a/docs/standalone.xml b/docs/standalone.xml
index 7131b5d56..3705a2281 100644
--- a/docs/standalone.xml
+++ b/docs/standalone.xml
@@ -593,7 +593,7 @@ SSH(ACCEPT) net       $FW           </programlisting>
     <important>
       <para>Users of the .deb package must edit
       <filename>/etc/default/shorewall</filename> and set
-      <varname>STARTUP=1.</varname></para>
+      <varname>startup=1.</varname></para>
     </important>
 
     <important>
@@ -631,6 +631,13 @@ SSH(ACCEPT) net       $FW           </programlisting>
       url="starting_and_stopping_shorewall.htm"><quote><command>shorewall
       try</command></quote></ulink> command.</para>
     </warning>
+
+    <para>The firewall will start after your network interface has been
+    brought up. This leaves a small window between the time that the network
+    interface is working and when the firewall is controlling connections
+    through that interface. If this is a concern, you can close that window by
+    installing the <ulink url="Shorewall-init.html">Shorewall Init
+    Package</ulink>.</para>
   </section>
 
   <section id="Problems">
diff --git a/docs/three-interface.xml b/docs/three-interface.xml
index 3b44a147a..32ee8d93c 100644
--- a/docs/three-interface.xml
+++ b/docs/three-interface.xml
@@ -1145,6 +1145,13 @@ ACCEPT    net       $FW                 tcp        80       </programlisting><it
         url="starting_and_stopping_shorewall.htm"><command>shorewall
         try</command> command</ulink>.</para>
       </warning></para>
+
+    <para>The firewall will start after your network interfaces have been
+    brought up. This leaves a small window between the time that the network
+    interface are working and when the firewall is controlling connections
+    through those interfaces. If this is a concern, you can close that window
+    by installing the <ulink url="Shorewall-init.html">Shorewall Init
+    Package</ulink>.</para>
   </section>
 
   <section id="Trouble">
diff --git a/docs/two-interface.xml b/docs/two-interface.xml
index 3d5ba0477..670d5798b 100644
--- a/docs/two-interface.xml
+++ b/docs/two-interface.xml
@@ -1062,6 +1062,13 @@ ACCEPT     loc       $FW     tcp       80          #Allow Weblet to work</progra
         configuration and test it using the <quote><command>shorewall
         try</command></quote> command.</para>
       </warning></para>
+
+    <para>The firewall will start after your network interfaces have been
+    brought up. This leaves a small window between the time that the network
+    interfaces are working and when the firewall is controlling connections
+    through those interfaces. If this is a concern, you can close that window
+    by installing the <ulink url="Shorewall-init.html">Shorewall Init
+    Package</ulink>.</para>
   </section>
 
   <section id="Trouble">