Shorewall config: use NFQUEUE bypass. Refs #2935
Merge branch 'b2935' Refs #2935