firewall: fix dmz rule after firewall update