diff --git a/Shorewall/changelog.txt b/Shorewall/changelog.txt
index 12e25c632..695fe2fd1 100644
--- a/Shorewall/changelog.txt
+++ b/Shorewall/changelog.txt
@@ -2,6 +2,8 @@ Changes in Shorewall 4.4.20.3
 
 1)  Remove deprecated options from the .conf files.
 
+2)  Exempt wildcard interfaces from sfilter.
+
 Changes in Shorewall 4.4.20.2
 
 1)  Reject degenerate tcpri entries.
diff --git a/Shorewall/known_problems.txt b/Shorewall/known_problems.txt
index f52d8b4b8..42b0cbc68 100644
--- a/Shorewall/known_problems.txt
+++ b/Shorewall/known_problems.txt
@@ -5,9 +5,13 @@
     (unannotated) version of shorewall6.conf, regardless of the '-p'
     option.
 
+    Corrected in 4.4.20.1
+
 3)  Fixed item 1 from 4.4.19.4 was inadvertently omitted from
     4.4.20.
 
+    Corrected in 4.4.20.2
+
 2)  A defect introduced in 4.4.20 can cause the following failure at
     start/restart:
 
@@ -18,12 +22,18 @@
     /etc/shorewall/tcdevices and the default HTB queuing discipline is
     used.
 
+    Corrected in 4.4.20.2
+
 3)  The 'sfilter' interface option introduced in 4.4.20 is not applied
     to traffic addressed to the firewall itself.
 
+    Corrected in 4.4.20.2
+
 4)  IPSEC traffic is incorrectly included in the rules generated by
     sfiltering.
 
+    Corrected in 4.4.20.2
+
 5)  Shorewall 4.4.20 can, under some circumstances, fail during
     iptables-restore with a message such as the following:
 
@@ -38,6 +48,18 @@
     ERROR: iptables-restore Failed. Input is in
     	   /var/lib/shorewall/.iptables-restore-input
 
+    Corrected in 4.4.20.2
+
 6)  The following extraneous warning message may be ignored:
 
     	WARNING: sfilter is ineffective with FASTACCEPT=Yes
+
+    Corrected in 4.4.20.2
+
+7)  A simple configuration like the 'Universal' sample that includes a
+    single wildcard interface ('+' in the INTERFACE column) produces a
+    ruleset that blocks all incoming packets.
+
+    Workaround: Add the 'routeback' option to the entry in
+    /etc/shorewall/interfaces.
+ 
diff --git a/Shorewall/releasenotes.txt b/Shorewall/releasenotes.txt
index 39318d26b..1bd538dff 100644
--- a/Shorewall/releasenotes.txt
+++ b/Shorewall/releasenotes.txt
@@ -18,6 +18,10 @@ VI.   PROBLEMS CORRECTED AND NEW FEATURES IN PRIOR RELEASES
 1)  Deprecated options have been removed from the .conf files. 
     They remain in the man pages.
 
+2)  A simple configuration like the 'Universal' sample that includes a
+    single wildcard interface ('+' in the INTERFACE column) produces a
+    ruleset that blocks all incoming packets.
+
 4.4.20.2
 
 1)  Problem Corrected #1 from 4.4.19.4 was inadvertently omitted from