openwrt: fix guest firewall rules