Add an option to use shorewall instead of APF or Iptables