fixed variable name in firewall_rule