firewall::rule direction normalization