shorewall zone nesting not working

peter:/etc/shorewall # cat zones interfaces hosts
#
# Shorewall version 4 - Zones File
#
# For information about this file, type "man shorewall-zones"
#
# The manpage is also online at
# http://www.shorewall.net/manpages/shorewall-zones.html
#
###############################################################################
#ZONE   TYPE            OPTIONS         IN                      OUT
#                                       OPTIONS                 OPTIONS
fw          firewall
wan     ipv4
lan:wan     ipv4
vm      ipv4
#
# Shorewall version 4 - Interfaces File
#
# For information about entries in this file, type "man shorewall-interfaces"
#
# The manpage is also online at
# http://www.shorewall.net/manpages/shorewall-interfaces.html
#
###############################################################################
FORMAT 2
###############################################################################
#ZONE           INTERFACE               OPTIONS
-           eth0
lan         br0             bridge,routeback
vm          br1             bridge,routeback
vm          tap+
#
# Shorewall version 4 - Hosts file
#
# For information about entries in this file, type "man shorewall-hosts"
#
# The manpage is also online at
# http://www.shorewall.net/manpages/shorewall-hosts.html
#
###############################################################################
#ZONE   HOST(S)                                 OPTIONS
#wan     eth0:0.0.0.0/0
wan     br0:0.0.0.0/0
lan     br0:192.168.179.0/24
#lan     eth0:192.168.179.0/24


peter:/etc/shorewall # iptables --list -v --line-numbers

Chain br0_fwd (1 references)
num   pkts bytes target     prot opt in     out     source               destination
1      108 13734 dynamic    all  --  any    any     anywhere             anywhere             ctstate INVALID,NEW
2      163 18950 lan_frwd   all  --  any    any     anywhere             anywhere
3        0     0 lan_frwd   all  --  any    any     192.168.179.0/24     anywhere
4        0     0 wan_frwd   all  --  any    any     anywhere             anywhere

Chain br0_in (1 references)
num   pkts bytes target     prot opt in     out     source               destination
1       28  3210 dynamic    all  --  any    any     anywhere             anywhere             ctstate INVALID,NEW
2    15662 4189K lan2fw     all  --  any    any     anywhere             anywhere
3        0     0 lan2fw     all  --  any    any     192.168.179.0/24     anywhere
4        0     0 wan2fw     all  --  any    any     anywhere             anywhere

Chain br0_out (1 references)
num   pkts bytes target     prot opt in     out     source               destination
1     3138  324K fw2lan     all  --  any    any     anywhere             anywhere
2        0     0 fw2lan     all  --  any    any     anywhere             192.168.179.0/24
3        0     0 fw2wan     all  --  any    any     anywhere             anywhere