better shorewall params handling