firewall: fix tests