shorewall: bridge is only supported on ipv4 right now
massive run_state refactoring