1)  On systems running Upstart, shorewall-init cannot reliably secure
    the firewall before interfaces are brought up.