fix bug that do firewall in ovs twice