allow access to samba shares in shorewall