Note: Sub-directories mentioned below are sub-directories of the
directory containing this document.

1)  Entries in the /etc/shorewall/ecn file cause invalid iptables rules to be
    generated by Shorewall-perl.
    
    Either:

    a) Replace /usr/share/shorewall-perl/Shorewall/Rules.pm with the Rules.pm
       file from the errata/Shorewall-perl/ sub-directory.

    or

    b) Patch  /usr/share/shorewall-perl/Shorewall/Rules.pm with the
       patch-perl-4.0.1-1.diff file from the errata/patches/Shorewall-perl/
       sub-directory.

2)  It is not possible to define traffic shaping on a bridge port; the
    generated script complains that the interface is not up and configured.

    Shorewall-shell Users, either:

    a) Replace /usr/share/shorewall-shell/lib.tc with the lib.tc
       file from the errata/Shorewall-shell/ sub-directory.

    or

    b) Patch  /usr/share/shorewall-shell/lib.tc with the
       patch-shell-4.0.1-1.diff file from the errata/patches/Shorewall-shell/
       sub-directory.

    Shorewall-perl Users, either:

    a) Replace /usr/share/shorewall-perl/Shorewall/Tc.pm with the Tc.pm
       file from the errata/Shorewall-perl/ sub-directory.

    or

    b) Patch  /usr/share/shorewall-perl/Shorewall/Tc.pm with the
       patch-perl-4.0.1-3.diff file from the errata/patches/Shorewall-perl/
       sub-directory.

3)  On a system without Shorewall-shell installed, entries with the 'proxyarp'
    or 'maclist' option in /etc/shorewall/interfaces and entries with the
    'maclist' option in /etc/shorewall/hosts will cause the 'add' and 'delete'
    commands to fail.

    Either:

    a) Replace /usr/share/shorewall-common/lib.config with the lib.config
       file from the errata/Shorewall-common/ sub-directory.

    or

    b) Patch  /usr/share/shorewall-common/lib.config with the
       patch-common-4.0.1-1.diff file from the
       errata/patches/Shorewall-common/ sub-directory.

4)  When using Shorewall-perl, some intra-zone rules are missing when a zone
    involves more than one interface or when a zone has both IPSEC and
    non-IPSEC networks.

    Either:

    a) Replace /usr/share/shorewall-perl/Shorewall/Rules.pm with the Rules.pm
       file from the errata/Shorewall-perl/ sub-directory and replace 
       /usr/share/shorewall-perl/Shorewall/Zones.pm with the Zones.pm
       file from the errata/Shorewall-perl/ sub-directory

    or

    b) Patch  /usr/share/shorewall-perl/Shorewall/Rules.pm and 
       /usr/share/shorewall-perl/Shorewall/Zones.pm with the
       patch-perl-4.0.1-4.diff file from the errata/patches/Shorewall-perl/
       sub-directory.

5)  When using Shorewall-perl, chain names in the CHAIN column of
    /etc/shorewall/interfaces are ignored when there are no bridges in the
    configuration.

    a) Replace /usr/share/shorewall-perl/Shorewall/Accounting.pm with the
       Accounting.pm file from the errata/Shorewall-perl/ sub-directory.

    or

    b) Patch  /usr/share/shorewall-perl/Shorewall/Accounting.pm with the
       patch-perl-4.0.1-5.diff file from the errata/patches/Shorewall-perl/
       sub-directory.