shorewall: remove rules recipe