net-firewall/shorewall: drop old