[44net] shorewall help ?

Greetings, I've been forced to change my main router to shorewall (I can go another route, but right now I'm just evaluating the situation), and as a result I have lost a few things that I have become a bit too used to over the past few years. Like having a DMZ host direct to my JNOS and being able to pass ip-ip direct to it. I have not figured out how to dmz to my jnos (2 ports on the shorewall, not 3) yet or how to pass ipip through ... Anyone on the list done this already ? I would appreciate some working examples, thank you. Maiko Langelaar / VE4KLM