compensate for newly-default firewall3 in upstream openwrt

Signed-off-by: Russell Senior <russell@personaltelco.net>