I just want to point out to a little hack of mine which aims at integrating the shorewall firewall configuration system with libpam-shield:

LibPamShieldShorewall

It's currently in production use on both of my servers and seems to work fine, although feedback (be it positive or negative) is appreciated.