Protect two configuration files in /lib - don't overwrite them on upgrade or reinstallation. Also now the firewall is set as "enabled" in a configuration file. User can control if it is started on boot by adding/removing a service to runlevel.