some fixes for firewall rules given new firewall code in openwrt