shorewall: parse options in interfaces file
shorewall: parse multiple IPs in DNAT source