Add DESTINATION as a filter for stanzas as well as ENABLE_DESTINATION_RULE which will explicitly set the destination in the firewall rule