logrotate: rotate firewall.log Refs #2541

Use copytruncate to avoid rsyslogd restart.