firewall-policy: fix drop and logging on red0;