net-firewall/shorewall* forked, because #472434 takes too much time.
Applying changes for #472790 on my own.
Normalized net-firewall/shorewall-lite.