Wrapper or not, building a wrapper that works for as many use cases for as long a time as Shorewall has is something.
Frankly, it sounds like your suggesting that because he didn't invent the underlying network stack, or network protocols, that makes it a quick and dirty half day or so project. 99.9% of development work in recent years hasn't been inventing new stuff, it's been building wrappers. Wrappers that compose other well though out tech (which are hard choices to make), while maintaining the flexibility to actually be useful for more than a single project and a short period of time.
I know you said none of those things, however, that's what I read between the lines of a putdown comment like "It's just a wrapper...".