base/firewall: fix duplicate rankings