shorewall: fix destination

It must be an array