add note to https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=334

diff --git a/INCOMPATIBILITIES b/INCOMPATIBILITIES
index fd695e1b81c32166ec9f1b12f1d1076b4fcb8a7b..7057b2689ed1a264150a9463713e3b544f2b8ad0 100644 (file)
--- a/INCOMPATIBILITIES
+++ b/INCOMPATIBILITIES
@@ -4,3 +4,9 @@ INCOMPATIBILITIES:
   with kernels that do not support it, will result in a plain DROP instead
   of REJECT.  Use with caution.
   Kernels that do support it:
+
+- There are some issues related to upgrading from 1.2.x to 1.3.x on a system
+  with dynamic ruleset changes during runtime. (Please see 
+  https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=334).
+  After upgrading from 1.2 to 1.3, it suggest go do an iptables-save, then
+  iptables-restore to ensure your dynamic rule changes continue to work.