1) On systems running Upstart, shorewall-init cannot reliably secure
the firewall before interfaces are brought up.