now fw_rules device is statically allocated