Comment 1 for bug 1308963

If you run firewall module tests, you could see there are plenty of failures (probably because of bad regexes)
http://pastebin.com/8WHTChnQ
I hope some of them (confine, ipv6) could be safely ignored, while others should be addressed.