heat: fix TCP/UDP range rules