Update config for Shorewall 4.6, add NFQUEUE bypass. Refs #2935
spec: requires shorewall >=4.6 Refs #2935
Merge branch 'b2935'. Refs #2935