install: apply oo-gear-firewall by default