only sync switch
better shorewall params handling