shorewall templates: add NFQ support for extra zones. Refs #1771