firewall: Use correct interface for RED