shorewall: use restrict alias for mumble