shorewall is not started reliable

we had several issues where shorewall was not started and the iptables rules from the inital fw script were still active, blocking access to services needed. see the related issues.

(from redmine: created on 2014-04-04, closed on 2014-05-09, relates #4590 (closed), relates #5649 (closed))