Add unreachable rules for tunl0

Always set tunl0 as network interface for freifunk firewall zone (see
https://github.com/freifunk-berlin/firmware/issues/133). This ensures
that freifunk-policyrouting adds unreachable rules for tunl0 otherwise
traffic may leak if a SmartGateway client creates a tunnel.