Firewall now copes with backup interfaces.
Backup interfaces have all their proper routes and firewall rules set, they are just not used for Internet connections.