Set enabled instead of running for shorewall...

and defined pillar "inet_interface" for default configuration.