logstash firewall rules with rsyslog