firewall: support both update-rc.d as well as chkconfig