Errors testing migration from SW Iptables to SW Nft

Hi there,

I'm "shorewall check"ing my Iptables configs and bumps into the following:

- SW Iptables supports 
https://shorewall.org/configuration_file_basics.htm#INCLUDE but not SW NFT.
E.G: "?INCLUDE sw-dmz.macaddresses"

- Sw Iptables supports using 
https://shorewall.org/manpages/shorewall-params.html
but not fully SW Nft, more specifically: "file is always processed by 
/bin/sh so the full range of shell capabilities may be used.".
E.G: "VM_NET=$(awk -F, '/domain=/ && /vm/{print $2}' $DNSMASQ_CONF)"

- SW Iptables supports 
https://shorewall.org/manpages/shorewall-maclist.html but SW Nft  does 
not work without a MAC address:
E.G: "ACCEPT $VM_IF - 10.17.240.100,10.17.240.120-10.17.240.124"


I'mtesting SW-nft in a VM, built from source.

-- 
Matt Darfeuille