ferm rule for bacula connections from internal

This is a stopgap solution until #96226 is resolved and can be safely
merged

Change-Id: Ie0a1c3acb17ba4b023f70d52caf9b376f9ea9d66