shorewall role for simple one-interface setup
make banaction and usedns configurable