base/firewall: syntax error