Fix location of default empty firewall_allow array